Troj/Banker-BLN is a Trojan for the Windows platform.
Troj/Banker-BLN includes functionality to send notification messages to remote locations.
When first run Troj/Banker-BLN copies itself to:
<Startup>\lsass32.exe
The following registry entry is created to run lsass32.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
lsass32
c:\lsass32.exe