Extracted

• • Target

    df065fb55986e8f2e154f8975db403e32599c34fe9bf33d983a84a54386fa775.exe

  • Size

    70KB

  • MD5

    0a7d747bc5946ceed8e2bf030be530f0

  • SHA1

    432d55be1439b53ad962ad13769375207255a52a

  • SHA256

    df065fb55986e8f2e154f8975db403e32599c34fe9bf33d983a84a54386fa775

  • SHA512

    b46fd4a491148509289b03dbb0214101ce1ccbcab9c946b4b1225ad69b7ff2b13948d568c1bd54ca6574b28d811e07d9c3f73591658b42934817d9a03cfbee79

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhQ:E1oEFlt6vghzwYu7vih9GueIh9j2IoHP

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2