Extracted

• • Target

    b341b759b8814efb64870801a56a78878632921d8c972a350fccb2556667db80.exe

  • Size

    83KB

  • MD5

    94f58f9c3460ef0c6d1f4984b94177e7

  • SHA1

    0aa96acf240561674da52f0f2fdcfd0c3a0bee49

  • SHA256

    b341b759b8814efb64870801a56a78878632921d8c972a350fccb2556667db80

  • SHA512

    67b00e0de8cab3acad365774b7c0296545501f0089b106795f893b8e6b154df2b551b38075d9624b9ec04198930e85a9ea35eb1064aca2542dee773ce1af630a

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hIbHZN:NAoglOwvl4ulkP6vghzwYu7vih9GueI0

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2