Extracted

• • Target

    592f54b40eaee38b24e3107802561e3c43fc0a0c46c7e499c48e1e6663f84f67.exe

  • Size

    54KB

  • MD5

    3f73b86c3d13547a48175f8c1abbfd30

  • SHA1

    b03c87d9e5d56206643beaffbbe3daeede3c587b

  • SHA256

    592f54b40eaee38b24e3107802561e3c43fc0a0c46c7e499c48e1e6663f84f67

  • SHA512

    00702eb9dcb14a27f4881c0624da2f33e825ab5666b5cf0f6a5cf379f1a09510c99fbfe12c6f0ec7a75c5fc7a926e098f7db87f7af2b7abb18c594d262b454aa

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbIKv8hIbHZhyhga:E1oEFlt6vghzwYu7vih9GueIh9j2IoH8

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2