Extracted

• • Target

    171e03ee551c8d354140720ae36b9ddea7d6ef7d30edeffe569e0dadc610d1d1.exe

  • Size

    55KB

  • MD5

    52a2bb69f2c4000b9fb73b9b201d4ce0

  • SHA1

    a4481c96ac27c3e3585094dcc1037b1dce28bf16

  • SHA256

    171e03ee551c8d354140720ae36b9ddea7d6ef7d30edeffe569e0dadc610d1d1

  • SHA512

    c6b4e790502192348d35d1de6c851fa3bbc60ad244ccc2554b923124ba381f024e217eba792b163d2598479515960402674fb444828d68db2f5cf7f7ed0acfae

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrh7:E1oEFlt6vghzwYu7vih9GueIh9j2IoHo

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2