Extracted

• • Target
    8fd956488ae7985334a4cc2fc63042b5.exe
  • Size 622KB
  • SHA256 6a2844405b839352f36c7bfde22974c93ad9cb8f97764d0d19e08160f32f45a9
  • MD5 8fd956488ae7985334a4cc2fc63042b5
  • SHA1 371eb8f94c3c482f18423df17ccea6621e4dec83
  • SHA512 26287b121d93eb6bfb8d93d238f7d802a2cc2582a5a52d00f8c518d2251911b483af99d87bdf6944f9ae555e61229aae8458f5ccce292e73d1b0ddb6d0fa7352
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoona5cce470ad0d57aff9fa94b5ee2c0c1fc2d802afdiscoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2