Extracted

• • Target

    5aa1f14a6b06482761f4738fbbf797a4a2125af03ffbfee5cd8350cfafceb2d3N.exe

  • Size

    50KB

  • MD5

    0afb3c7d97fb8a374e36b11fc19294c0

  • SHA1

    21eab65efefa90d1abde59e77489e70aaa855178

  • SHA256

    5aa1f14a6b06482761f4738fbbf797a4a2125af03ffbfee5cd8350cfafceb2d3

  • SHA512

    667ab6e99fc1ab9d66756be0ea2a57bfbcd83c14ffeca41c7d0a314e9e8c69003bb1589419145a95885fd2009dd49b20b173cc1347b6d8cbf13a5f2adbb1d134

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johleHhvGhZchUXf:E1oEFlt6vghzwYu7vih9GueIh9j2IoHV

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2