Extracted

• • Target
    af330dc8f44e538e382b175398484068.exe
  • Size 461KB
  • SHA256 96705f492ccbba730a3745b9c27c836ff7b877c78f59d08b797a57faaebcd6ed
  • MD5 af330dc8f44e538e382b175398484068
  • SHA1 79da00442b415855a6215e958d6069cfe526815f
  • SHA512 79a3045b9ae0392a6a9c26424ad44ca1e7fa396f0d3b320ac0fddeb9a6759dba5286b36ed49a40ab4b13b089ddeebd92e889916fd5eff9a06ab15a725be4d648
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccooncd8dc1031358b1aec55cc6bc447df1018b068607discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Raccoon Stealer Payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2