Extracted

• • Target

    f484298ca20a9d524eb673dcc8c84b129b007c4538062acb2b80d41d88e01631.exe

  • Size

    60KB

  • MD5

    cb79c58b14648f7850bf1315757bc820

  • SHA1

    353890ae464b44f619e43472368cbda181ca815d

  • SHA256

    f484298ca20a9d524eb673dcc8c84b129b007c4538062acb2b80d41d88e01631

  • SHA512

    1718266c724432104f30d8508921fc77b1bd58b99de8938106914c0d339e2d24d47036a6f58ed536f9b7dcf2b6f4ca37bea6df14d36e4375f3c2e801cba9b67c

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhm:E1oEFlt6vghzwYu7vih9GueIh9j2IoHb

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2