Extracted

• • Target
    3d274ff3730e8dd0983f315b2995424e.exe
  • Size 527KB
  • SHA256 6166927dec8a133a202a8b67a57d59f8f9a26a59ab8ea46d0424f07f6df827be
  • MD5 3d274ff3730e8dd0983f315b2995424e
  • SHA1 c172ad90839d68979ae53ca36ab06f0a4e68911c
  • SHA512 46d2cbbe223491e7a2f0e9ee47a4c4d94ca6286bec8cadb0621212a58b24bffe5e93e01ed10aa5f5b16fa2556aa61a7f87ca606aa09313672e05adc0b18edb60
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon7ae9f477fd3c745797073700f8a38ebc14af615ddiscoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2