Extracted

• • Target
    994a7addca80b4ef56144ba030076078.exe
  • Size 622KB
  • SHA256 1f7d3af11fcd02d8a6cd0c55deab3fc0e847ec8f0067e971b5cef6945e360ad9
  • MD5 994a7addca80b4ef56144ba030076078
  • SHA1 aaf2f1fb0372e3403faa0f5971bbe848466c24a4
  • SHA512 cef74727ea671338245cdceeae5a8c9172706dd14b66114214bebc62883379469e17cfb2a7d80bf3936fedffd59c7c21b0821f08c4687369097bc7cf602223d2
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoona5cce470ad0d57aff9fa94b5ee2c0c1fc2d802afdiscoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2