Extracted

• • Target

    e39ce64dd6383d79bd21f6f3e82bc732abb3d69a560059947cc44fb46035e1b5.exe

  • Size

    43KB

  • MD5

    cb984a9c62df922ba4ff574b18633871

  • SHA1

    ed30bbfc62137c3c299dab19e8296dca516b9d7e

  • SHA256

    e39ce64dd6383d79bd21f6f3e82bc732abb3d69a560059947cc44fb46035e1b5

  • SHA512

    08a25cd6e4e92a3d9199cf2e62656de0b5140e14a67a5a145f60f4ad67d1d3f921a2e99edd2aedef1907ef204cdb5a711a6ad994dadf91947e1b8f7ab30dfc22

  • SSDEEP

    768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6If:e6q10k0EFjed6rqJ+6vghzwYu7vih9GT

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2