Extracted

• • Target

    e6bf88f91ff47501402f14c8de4ce45b8a3af61a66f69dee451f4d43c9c3704eN.exe

  • Size

    60KB

  • MD5

    a64a202f3ff2f7f50577e36751697540

  • SHA1

    57ce839f3677088df359303924dee4c5fa2195c1

  • SHA256

    e6bf88f91ff47501402f14c8de4ce45b8a3af61a66f69dee451f4d43c9c3704e

  • SHA512

    07da542b0d039efb633712182ac1c143f9c575c74c3c82004bd2bbcfb03498ed3f7b74a01c318a81cef7d5612ce4a9579a5da1a89d9baa37d3e76dee98cb3841

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hDhIykh4h3:E1oEFlt6vghzwYu7vih9GueIh9j2IoHM

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2