Extracted

• • Target
    49d844e250e60546e57bee90ba57b0b3.exe
  • Size 534KB
  • SHA256 7682aa460bd69a320a371d9f8b5a1d8445c4ed0b6f2d2bfaf809ba12f0d17433
  • MD5 49d844e250e60546e57bee90ba57b0b3
  • SHA1 68d5a4748dcd4c019504a43d08eb43e6d1e58399
  • SHA512 033b613cd471a8a00c4a705081203d29f08054e22a8eef758dd74243bf5d7daee3b235e2a3d7e7f59dcdee6530207ef0a77075c9c6ad7461e9a4bba792d6c60d
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon4ac34965e0b2c7957c591bdfe05bc582b680e050discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2