Extracted

• • Target

    f5324bea64fd0d995a75d4f966adc8525601e2730259d910150fb1a1fa560f22N.exe

  • Size

    83KB

  • MD5

    dfd474496753081ef3a55a8ace53fa20

  • SHA1

    67128f93bfc3ebcdc180fe9674054444730d9b0f

  • SHA256

    f5324bea64fd0d995a75d4f966adc8525601e2730259d910150fb1a1fa560f22

  • SHA512

    4d93a3615c6a52ed9c8de398e9226f0063484dd0719b364f82603c5860d08d9db23d7ba9c00a4883098f4de274d729c1624306ac917779e45b7a36c340692faf

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hIbHZI:NAoglOwvl4ulkP6vghzwYu7vih9GueIp

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2