Extracted

• • Target
    fd38c8fbb0c9b93cb14d1076228e6873ab6d4a52446ba.exe
  • Size 600KB
  • SHA256 fd38c8fbb0c9b93cb14d1076228e6873ab6d4a52446ba129dc38ed53fe7a0cff
  • MD5 c9b3b14f75357535c8f7d948f82cf167
  • SHA1 8ceffeb8d5b1a8b73c3358c39dbb598200fa980e
  • SHA512 d62a6b5c5ff051acfbc92f814a789294294d926debcd98cab5d30884f6dab38776bb4e6ad9399f1f66e984f26c7bdbf66cae7e950ffd1e446fd0c5e9c30c5d55
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoona5cce470ad0d57aff9fa94b5ee2c0c1fc2d802afdiscoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2