Extracted

• • Target
    e86a4604ef8b8aa51de835f29953cee41ab8ebdbb0a67.exe
  • Size 534KB
  • SHA256 e86a4604ef8b8aa51de835f29953cee41ab8ebdbb0a67c820ab37f2642237e77
  • MD5 7afe1018e1d7b65d4ed5d44ec9e0d8f7
  • SHA1 bbe5005a857fbb52c49d395d3f8e1323a118c4ad
  • SHA512 6a9fc900458f80907de2fea736010be87e6c504371838eee4c6a93c577731b9ee1a0a7c900e6fbabca17f140888244cfc6b6a38c6e19d7b1d9b7298da9662a30
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon00bdd6858c3856861f0d81937643f61ec7429443discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2