Extracted

• • Target

    3e4bdd3b6a5b3ff9a0a322b3dbce53dabcf0a95ed44f616c3be1812b0ca19fce

  • Size

    84KB

  • MD5

    83eb176f1a13e72db943038f799c15d6

  • SHA1

    24e038a7e3714d51fdf63773bf36eea292b84a30

  • SHA256

    3e4bdd3b6a5b3ff9a0a322b3dbce53dabcf0a95ed44f616c3be1812b0ca19fce

  • SHA512

    33fd443c9299fdfd11f52df0543b1e25bd2cc775d12658e24545d041913078d300206a8a81a9e4b60654b0256a55b5e779bdcfa8f6f100142501a06884b689e2

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johChvhnhLhm:NAoglOwvl4ulkP6vghzwYu7vih9GueIW

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2