General

Malware Config

Signatures

Files

• Raccine.zip

  .zip
• Raccine/Raccine.exe

  .exe windows x64

  
  
• Raccine/RaccineElevatedCfg.exe

  .exe windows x86

  
  
• Raccine/RaccineRulesSync.exe

  .exe windows x86

  
  
• Raccine/RaccineSettings.exe

  .exe windows x86

  
  
• Raccine/Raccine_x86.exe

  .exe windows x86

  
  
• Raccine/install-raccine.bat
• Raccine/preqeq/NDP462-KB3151800-x86-x64-AllOS-ENU.exe

  .exe windows x86

  
  

  Exports

  Exports

  ?dwPlaceholder@@3PAEA

  _DecodePointerInternal@4

  _EncodePointerInternal@4

• Raccine/preqeq/vc_redist.x64.exe

  .exe windows x86

  
  
• Raccine/preqeq/vc_redist.x86.exe

  .exe windows x86

  
  
• Raccine/reg-patches/raccine-reg-patch-bcdedit.reg
• Raccine/reg-patches/raccine-reg-patch-diskshadow.reg
• Raccine/reg-patches/raccine-reg-patch-net.reg
• Raccine/reg-patches/raccine-reg-patch-powershell.reg
• Raccine/reg-patches/raccine-reg-patch-ransomware.reg
• Raccine/reg-patches/raccine-reg-patch-taskkill.reg
• Raccine/reg-patches/raccine-reg-patch-uninstall.reg
• Raccine/reg-patches/raccine-reg-patch-vssadmin.reg
• Raccine/reg-patches/raccine-reg-patch-wbadmin.reg
• Raccine/reg-patches/raccine-reg-patch-wmic.reg
• Raccine/scripts/windows-hardening.bat
• Raccine/yara/ext-vars-test.yar
• Raccine/yara/gen_powershell_invocation.yar
• Raccine/yara/gen_raccine_kills.yar
• Raccine/yara/gen_ransomware_command_lines.yar
• Raccine/yara/in-memory/gen_loaders.yar
• Raccine/yara/mal_darkside.yar
• Raccine/yara/mal_emotet.yar
• Raccine/yara/mal_exchange_cryptominer.yar
• Raccine/yara/mal_revil.yar
• Raccine/yara/powershell_loaders.yar
• Raccine/yara/ryuk-commandlines.yar
• Raccine/yara/yara32.exe

  .exe windows x86

  
  
• Raccine/yara/yara64.exe

  .exe windows x64

  
  
• Raccine/yara/yarac32.exe

  .exe windows x86

  
  
• Raccine/yara/yarac64.exe

  .exe windows x64