Extracted

• • Target
    41fc44fd7b8e5b0b4598b465f6dd8324.exe
  • Size 528KB
  • SHA256 fe74fdada2cc433e9912a1639d11c11bef71a7562b769ebd4e0221fb39e3e566
  • MD5 41fc44fd7b8e5b0b4598b465f6dd8324
  • SHA1 3cc63d17667fed2fc87a002b4c23b6e8e562681b
  • SHA512 8cdf86098db7f801c2a28f9ee522781eed51d64a6e8c2ce2e0f586832f21c5be6a1856da7f8bbed235a30e1409dbbdae7efc1420246fd8d13f5466c64522342c
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonbe3395cf599097fd64683b3929fb99405a85dd04discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2