Extracted

• • Target
    8bf4053138613b27eb0730cee09e5eec606257976588c.exe
  • Size 522KB
  • SHA256 8bf4053138613b27eb0730cee09e5eec606257976588c8d4f219632023bbddc6
  • MD5 5cbbdb41055227b7d5402602c742c127
  • SHA1 6f9d1dc3afb15e718572c13b79c7c8a1e73e0ade
  • SHA512 8c151d450441527da281f267e31d5796ffe9683ba039d9f53e0f641da1f47fa4f2e72b8959601a80aa99fa31b42f1d3ee35079425c88bff93f5e5c5f630852d0
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonfe582536ec580228180f270f7cb80a867860e010discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2