Extracted

• • Target

    7ae7c76c807897f840279daf35457e0c4551aca80c2dcd973a00c7c019007e85.exe

  • Size

    60KB

  • MD5

    c89913ce3320718fcfff0e3648366abd

  • SHA1

    71ee2e96b066be1eee81563e41a80d7696331703

  • SHA256

    7ae7c76c807897f840279daf35457e0c4551aca80c2dcd973a00c7c019007e85

  • SHA512

    2912bbdca86385e572ef85584123a27da2e6ec1ba9c84b72af11051c2a00d1ace4532d38ce29680f3c32a27022555664a794a154cbb99341d364143e0657fb70

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hDhIykh4ha:E1oEFlt6vghzwYu7vih9GueIh9j2IoHB

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2