General
-
Target
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8N.exe
-
Size
69KB
-
Sample
250324-gllwsazsc1
-
MD5
95ab0f4403c7666dc759c9ee8e1eb8d0
-
SHA1
1d88d1b3718a859f06fb0e3d4449a140bb75ab7c
-
SHA256
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8
-
SHA512
7f79e1fddfd1c911bd57593d151436d1bfa9aaa59a0807338dbd8e0dfed5a55ffde99b976267c3b283a5668290a53f2a77e17869a9cd2e9eb120fff61526a1a5
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrh7:E1oEFlt6vghzwYu7vih9GueIh9j2IoHM
Static task
static1
Behavioral task
behavioral1
Sample
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8N.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
blihanstealer
pomdfghrt
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
-
Target
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8N.exe
-
Size
69KB
-
MD5
95ab0f4403c7666dc759c9ee8e1eb8d0
-
SHA1
1d88d1b3718a859f06fb0e3d4449a140bb75ab7c
-
SHA256
bebdb56fa947d23d406f875c8378b300df5fb133d9e231cf22bd11b6a17c35c8
-
SHA512
7f79e1fddfd1c911bd57593d151436d1bfa9aaa59a0807338dbd8e0dfed5a55ffde99b976267c3b283a5668290a53f2a77e17869a9cd2e9eb120fff61526a1a5
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrh7:E1oEFlt6vghzwYu7vih9GueIh9j2IoHM
Score10/10-
Blihanstealer family
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-