Extracted

• • Target

    b736007774729826d5c79491b77f39702b5be640e73a7d1ee0ecaae9babe3bd7N.exe

  • Size

    72KB

  • MD5

    44267ad1b3da7ffb6968ec54e0cee730

  • SHA1

    bc7a885074caf707f9c5fca007a1784ffe9a3f83

  • SHA256

    b736007774729826d5c79491b77f39702b5be640e73a7d1ee0ecaae9babe3bd7

  • SHA512

    36026847947674dea139579e23f89cb5b6257739e5468e912758eb05ebdab56a09f8d4597d62e3d578d551083dabcaf2bc803d0decdf723158bf50c63d4f007b

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKvchQhehJ:NAoglOwvl4ulkP6vghzwYu7vih9GueIz

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2