Extracted

• • Target

    e6207c7e7f27ebe3e08bd40bdcac92d18e6a2e764770b3f7e4f8b143bc490615N.exe

  • Size

    70KB

  • MD5

    425ee094f78186ee5b9778b89433bb00

  • SHA1

    5be97e5d19b93cd2164cb5f3020cdefa3a2b3397

  • SHA256

    e6207c7e7f27ebe3e08bd40bdcac92d18e6a2e764770b3f7e4f8b143bc490615

  • SHA512

    77062ef1a7652f026f1e19988a536fdd0b37941a3eef91b2cce33c03ef13c1b5682bf41b8a60aac12845374667cad8165ccb8e5681e0c0db549572f215e85248

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhJ:E1oEFlt6vghzwYu7vih9GueIh9j2IoHM

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2