Extracted

• • Target

    SecuriteInfo.com.Trojan.GenericKD.43434340.27054.15629

  • Size

    1.3MB

  • MD5

    1f8eed90d518bbd88255d5bf3f1e9aae

  • SHA1

    5da89aaf0ae7da70921ada5819b93b361d24a2b4

  • SHA256

    95d7eca3a8e15537e6d6205da5441735897e21f39e6f0958338226e75a6961c8

  • SHA512

    f27a26af93350ae4e49f746d6fa5f0d52373100aad822a55a4db25abe521906fd17ec229965a67945e8107f315ad8695edb1a97e1cbffe70b564de68a4773ef1

  Score

  10^/10

  ransomwarestealerraccoonevasionspywaretrojandiscovery

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Raccoon log file

    Detects a log file produced by the Raccoon Stealer.

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spyware

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spyware

  • Checks for installed software on the system

    discovery

  • Modifies system certificate store

    evasionspywaretrojan

  • Suspicious use of SetThreadContext

  behavioral1behavioral2