Extracted

• • Target
    3239e4f3b0fba87f37ddb187f98f2b7e.exe
  • Size 491KB
  • SHA256 0dba3c5d5fde0546888ff7a8ada90af3c2eefe6184bed4e579bee2418ac1c096
  • MD5 3239e4f3b0fba87f37ddb187f98f2b7e
  • SHA1 56a49378eb37bf3b8d2a3ecb4902969b07726ba9
  • SHA512 657d130a149d3b1d3dd550901652a94735fd0062054785ce0f7284208b96f60c44303c6ebbab935f95f545742f1039e1eb6a1ff20ff0a485fb4136753c781566
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon6e76410dbdf2085ebcf2777560bd8cb0790329c9discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2