Extracted

• • Target

    4ad52e7c0f95c4aec3daa7cd73141b886b231a89b224861c431f9233a6b66d28.exe

  • Size

    75KB

  • MD5

    081aad23a44cc0bb5c0247b496fdd900

  • SHA1

    b51cf738240dcf8279535003f935faa8d5163d20

  • SHA256

    4ad52e7c0f95c4aec3daa7cd73141b886b231a89b224861c431f9233a6b66d28

  • SHA512

    60e41b87345be035cca04597840f45255efc5778c24ccc65e01905dc17ffeaf0cb0d9603910eceb35932a1f49fc18f1e21adc562aa6c2519c50a15ed91cd66aa

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhl:E1oEFlt6vghzwYu7vih9GueIh9j2IoHk

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2