Extracted

• • Target

    1dd9075b65db4d68d47e76044315cd9e50597e075adb5891f0e6ed1d489353b0.exe

  • Size

    82KB

  • MD5

    861f80acedcc9b02dadcd6ac74e042f1

  • SHA1

    2ba497afc2f45ca3c93a9e2591e086eb81a34fed

  • SHA256

    1dd9075b65db4d68d47e76044315cd9e50597e075adb5891f0e6ed1d489353b0

  • SHA512

    20c4d76087af864b892bc3bd45802433d6ac206b18f036ad9fc0848ac8f0a2ec90ff9276de84b52b25de0eed704910870524406be7c0fe789c01c550c10a4372

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hIbHZM:NAoglOwvl4ulkP6vghzwYu7vih9GueI1

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2