Extracted

• • Target
    6427a0e73eeccf3e6055ff6982a6ee30df3048d070947.exe
  • Size 601KB
  • SHA256 6427a0e73eeccf3e6055ff6982a6ee30df3048d0709472edc62b7e4fbc28e065
  • MD5 9b693e9b353822de38c1103efc0b4450
  • SHA1 77b8dc211142d1c52e9b020b3ad481007f350014
  • SHA512 bfc6eb0feec714815b209d605944061967ce0d243426f5f091e475f5622b4a6b103cae2d9ddd6aa5fa58cc88b65134d37261dc6ace18c10d151a3864147966a4
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoona5cce470ad0d57aff9fa94b5ee2c0c1fc2d802afstealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2