Extracted

• • Target
    af9f07e4d9b54bfd74ae113e7839b34d.exe
  • Size 590KB
  • SHA256 d9d4e5718a63c9ef3c1234369e4306914f0cee944033559fb645fea5528367fc
  • MD5 af9f07e4d9b54bfd74ae113e7839b34d
  • SHA1 3131fe57670535a26d28e2328648694e1ab2fa15
  • SHA512 4b62ea3a5086555c1aa5283c0c3b3e244ceba9b3028a200d2ab7e4c8736c889841cb78dea33a32a90bb458f4204d85efa79116528658840058262817d8e0bbc3
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccooncd8dc1031358b1aec55cc6bc447df1018b068607discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Raccoon Stealer Payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2