General
- Target 004fbd3619fd227aca248b30d8d45786611420ca56a486da8f87153ba89f96ad
- Size 85KB
- Sample260906-wz4fbazelg
- SHA256 004fbd3619fd227aca248b30d8d45786611420ca56a486da8f87153ba89f96ad
- MD5 c8b87e21b263073c025e5dbb659729ab
- SHA1 778abfe148fd3f5a3ae66bb87dc9355bc94b4ae2
- SHA512 fa8b083adf912e42c08ace1309f19d408da6633d138726dcd684ce9b9b547138203fc0b8720f7fa84287ef5c3fa3226bbedec579ad85e0bddf74f02071ae39a0
- SSDEEP 1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johleHhvGhZchUXb:E1oEFlt6vghzwYu7vih9GueIh9j2IoHF
- TLSH T1AD834A5B8EA1C8EBD800003B6BFAA67C86E7BC511DDCF3868BDDC81634D2918C95E557
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
004fbd3619fd227aca248b30d8d45786611420ca56a486da8f87153ba89f96ad.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
blihanstealer
Mutex
-
pomdfghrt
Attributes
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
- Target 004fbd3619fd227aca248b30d8d45786611420ca56a486da8f87153ba89f96ad
- Size 85KB
- SHA256 004fbd3619fd227aca248b30d8d45786611420ca56a486da8f87153ba89f96ad
- MD5 c8b87e21b263073c025e5dbb659729ab
- SHA1 778abfe148fd3f5a3ae66bb87dc9355bc94b4ae2
- SHA512 fa8b083adf912e42c08ace1309f19d408da6633d138726dcd684ce9b9b547138203fc0b8720f7fa84287ef5c3fa3226bbedec579ad85e0bddf74f02071ae39a0
- SSDEEP 1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johleHhvGhZchUXb:E1oEFlt6vghzwYu7vih9GueIh9j2IoHF
- TLSH T1AD834A5B8EA1C8EBD800003B6BFAA67C86E7BC511DDCF3868BDDC81634D2918C95E557
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application