General
-
Target
fd2235204dea081924ac2df3fc1aa2c5.exe
-
Size
1.2MB
-
Sample
200730-5jew38qlnj
-
MD5
fd2235204dea081924ac2df3fc1aa2c5
-
SHA1
12d620c9f825ac35cf39f0ed4ec7f07ced5cf4da
-
SHA256
1e03d6df0012f4d0a42d212e694b33fc69ec3a26a71f229ece1e134758c7916d
-
SHA512
0f61421c21bae420f46d56b625ac2c6c97799ac190d37f390efd4156bac53cb90c2d8fdcede6a7e962e08956627b06d7164aafdac8a94e8ff72ed0e17dddc6fe
Static task
static1
Behavioral task
behavioral1
Sample
fd2235204dea081924ac2df3fc1aa2c5.exe
Resource
win7
Behavioral task
behavioral2
Sample
fd2235204dea081924ac2df3fc1aa2c5.exe
Resource
win10v200722
Malware Config
Extracted
C:\Users\Admin\AppData\LocalLow\machineinfo.txt
raccoon
Extracted
C:\Users\Admin\AppData\LocalLow\machineinfo.txt
raccoon
Targets
-
-
Target
fd2235204dea081924ac2df3fc1aa2c5.exe
-
Size
1.2MB
-
MD5
fd2235204dea081924ac2df3fc1aa2c5
-
SHA1
12d620c9f825ac35cf39f0ed4ec7f07ced5cf4da
-
SHA256
1e03d6df0012f4d0a42d212e694b33fc69ec3a26a71f229ece1e134758c7916d
-
SHA512
0f61421c21bae420f46d56b625ac2c6c97799ac190d37f390efd4156bac53cb90c2d8fdcede6a7e962e08956627b06d7164aafdac8a94e8ff72ed0e17dddc6fe
Score10/10-
Raccoon log file
Detects a log file produced by the Raccoon Stealer.
-
Deletes itself
-
Loads dropped DLL
-
Reads user/profile data of local email clients
Email clients store some user data on disk where infostealers will often target it.
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
JavaScript code in executable
-