Extracted

• • Target

    f945b0a5683bdc99eb9dd5d12159b094367daea591a417d6486a86f71acf5f0a.exe

  • Size

    57KB

  • MD5

    3a2a8bcac7e57aca8c5523b2bf785ce9

  • SHA1

    b50bbb4e9d43282076d52f8616c78c6a180a594a

  • SHA256

    f945b0a5683bdc99eb9dd5d12159b094367daea591a417d6486a86f71acf5f0a

  • SHA512

    d90366a7d32cec5fa4c78d245c9e481f9b242a7dedef6b77ad160e3d19ac88abb12336151ad0ad489617dfff74ec3d480a96ac41376287d5c08ebefd7f19a22d

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhw:E1oEFlt6vghzwYu7vih9GueIh9j2IoHx

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2