Extracted

• • Target
    ce1ca38b388acd10458bb01ce53e31cd.exe
  • Size 553KB
  • SHA256 3301d5471a2630737667511ffb0033f6a9d4def8f53d6cc2f915fe4a7e041d2d
  • MD5 ce1ca38b388acd10458bb01ce53e31cd
  • SHA1 cf96361fc2401b344f931651887e8bc9679111e0
  • SHA512 87464664276e33056bf7b38c438103475bd0137d496a6eee70171952092e149a50b12c57fe044acd9d7691b059aa37957784ed0e88da347fa9b921ae90cdd0f6
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon6e76410dbdf2085ebcf2777560bd8cb0790329c9discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2