Extracted

• • Target

    54e73e7360b7bee8ca0fe7b2a5ceb2cd68cd95a7f7baf0b0782b72a832ef2190.exe

  • Size

    65KB

  • MD5

    78b1a9e7ab10ac6b6285c44f7191602e

  • SHA1

    9aa1eac52a8e5e3486987262d622c2d8fd966b56

  • SHA256

    54e73e7360b7bee8ca0fe7b2a5ceb2cd68cd95a7f7baf0b0782b72a832ef2190

  • SHA512

    153b4c1467c38f9f7cc48b3f499d7eebf23695bb491130b1b34b166f24f04764209da5f88a81a9a86b3be93ce334e13f9b99ef0862c1dbc43d626ac70c9c7287

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhK:E1oEFlt6vghzwYu7vih9GueIh9j2IoH3

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2