Extracted

• • Target

    a683902d84040d7399ff6e6488b4818725dee2f6cc2899bf4b06e26a9c0e2d16.exe

  • Size

    41KB

  • MD5

    c3bef7194087c48af9c7ba9e7bc0004e

  • SHA1

    842e3e9560cb4d226115abbfa14a388777bd6d94

  • SHA256

    a683902d84040d7399ff6e6488b4818725dee2f6cc2899bf4b06e26a9c0e2d16

  • SHA512

    9f8886e7c7c7da6ff7711901249d903d3bbf7b04e47239377152aa5b60c5931a66eb1d83c6276d5f7870994ae43dc86c98a73cc5c2c2f423c9f58f0394232e9b

  • SSDEEP

    768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IU:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gw

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2