Extracted

• • Target
    F51C230342755E84529B897DD731F98D.exe
  • Size 517KB
  • SHA256 84a52f8a65d4da65975fa7a33e9a420a609f7c93c26d70209bbdf7538d8b1def
  • MD5 f51c230342755e84529b897dd731f98d
  • SHA1 a604987f79f653be339225a971ba4885953bd277
  • SHA512 80025b15b4f742562bbcc2a0b287ef18cffea95b6c00e6882dd8517af22daf29da8ce0f1cdbc157c192263e0ab9ab25a05ccb18b6aa3739e29800cc303a30a47
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonc6b3f3d977f4a0659a24e7bd1874fc21bae9ac52discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2