Extracted

• • Target
    758B0FCAD0950B63607F06609BC9FFD7953206111F04A.exe
  • Size 572KB
  • SHA256 758b0fcad0950b63607f06609bc9ffd7953206111f04adfbf40bfc1c0b5ed2c0
  • MD5 dfd72cf998be69be0418701a0dee0272
  • SHA1 16ec42de83a698415daa33b47a5363fb289a4f6f
  • SHA512 aeed449c88a074193492c0831481696a7200a8ced70c4a634ab43d79da973b9dd02e3f850204aa3b97cf0a1e50c1593004a907c0ad42dfc75e7de33718793818
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoondiscoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2