Extracted

• • Target

    a5ea9e9bc2d11a929fd9b5a987f081cac7650c67389d614304bdcf843fa71eb9.exe

  • Size

    46KB

  • MD5

    5288759de565b951ff27d17a0cede9de

  • SHA1

    9cb2180628183ae759ab56573f2edd05801fa364

  • SHA256

    a5ea9e9bc2d11a929fd9b5a987f081cac7650c67389d614304bdcf843fa71eb9

  • SHA512

    ed4ee723b6f3e6d9deea38b1a3d1eafa227c44423c0deaafed2926a343e489560a1f81e94e03190685f4038a256831c87532d97513d9b80388cf891abcd55be0

  • SSDEEP

    768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6It:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gh

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2