Extracted

• • Target
    427658a34e75bb0d68ad56b895153423.exe
  • Size 489KB
  • SHA256 6d9f28b4085f6c72d6ce1d99fa7fc08d0187a5ca68dfb3aa362c49e53467bfdd
  • MD5 427658a34e75bb0d68ad56b895153423
  • SHA1 c4b95ed45ef8e492988cdbd92a0e216f532f675b
  • SHA512 731b7afb53b03b7dd065b891129674cb37210d1f54130faded851105d81b4bf6349259f1fc796311760dbe1dca33bbdbb551b8e100c909e7e2eb64e64a448a01
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonfe582536ec580228180f270f7cb80a867860e010discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2