Extracted

• • Target
    9ffea314e2561c333c307f8a17ca44f4.exe
  • Size 518KB
  • SHA256 c7c414abbdf984e9b783dc88e68bb97f6f7c3cb16765ca5cbee4284b6950e565
  • MD5 9ffea314e2561c333c307f8a17ca44f4
  • SHA1 f7f2ccbe21479f0f4c61c42fd652e115f9dd213b
  • SHA512 df6dd50c9c04b5b7c07adb6a0a60b0ec9282f7e6c3f7558fed066f605aba369cf0436d39f359f262e6674ffa8807140a93828507c72c5c685b8cf8f63e529d3c
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon6e76410dbdf2085ebcf2777560bd8cb0790329c9discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2