Extracted

• • Target

    52f022f93cac59667db2045579456e331a61bd8af39337d28a21daedf79575b6

  • Size

    50KB

  • MD5

    df906551e1e0ed3829a725badcf480f8

  • SHA1

    66c16f9f9dff7329126dc40d1b0fd552be14d58a

  • SHA256

    52f022f93cac59667db2045579456e331a61bd8af39337d28a21daedf79575b6

  • SHA512

    42b6f4d8146c1709a189b16b660a4fec506095775cbe2258df25b2d1806b17174b0b4afc24d30d8cfadfeffae128f5c4e83aab2f72aee8d6f233fa618b877a62

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johleHhvGhZchUXb:E1oEFlt6vghzwYu7vih9GueIh9j2IoH5

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2