Extracted

• • Target

    62fdbe8ce008c30b8d14f1fd3d96f414e1cab9eea1fabd01bd6860864a2013a5N.exe

  • Size

    77KB

  • MD5

    9e436fee77f67c4a18ff4e48802fce80

  • SHA1

    c78d4c45deb0693ff80f63e3249f1991ada88a75

  • SHA256

    62fdbe8ce008c30b8d14f1fd3d96f414e1cab9eea1fabd01bd6860864a2013a5

  • SHA512

    005cd69b9ca86cf17a972776327425fa00f0d11a1592ab621901838e407ff6f6e3a0c538e87213adbe630a755f0a5da7e6a5e717d9748cad57235f9dde02cb39

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhM:E1oEFlt6vghzwYu7vih9GueIh9j2IoHr

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2