Extracted

• • Target

    dc239fcffb6049e7a3f0c9ce4d060835236964dd6baa5788191673c3a47e2c2cN.exe

  • Size

    65KB

  • MD5

    2abe3e15faeb75eafa6006424d537dd0

  • SHA1

    875740a75eb76c2b4d07b9ab3b7cf4d9ae9526f3

  • SHA256

    dc239fcffb6049e7a3f0c9ce4d060835236964dd6baa5788191673c3a47e2c2c

  • SHA512

    72b902471f3574cd1140a4850abe501fb72270a68952cb740781496b512bec2be2c021c28fd22af25b7cd16978d5d13097d75459e9a6671307440949b6b3be8f

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjU+EmkcU+uhIehXehXhHhS:E1oEFlt6vghzwYu7vih9GueIh9j2IoHv

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2