Extracted

• • Target
    2a14081e42f8b1ba8f50dbb8fc7bc175.exe
  • Size 522KB
  • SHA256 f69c70945360bf5512ffb5ecddf623001764b8218d486793c7daae1e7a0f281d
  • MD5 2a14081e42f8b1ba8f50dbb8fc7bc175
  • SHA1 0ec5abd085d634e0f52d4077f1afb49376bafd69
  • SHA512 ae4477bcb63d0fc8f67f68aea3ccce4c4c64acd755ea39ca4488933ad2bc15fd0c5f5f14719122fcc320675cf583210c9e29813d01096f438d5bdc8b48925481
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon93d3ccba4a3cbd5e268873fc1760b2335272e198discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2