Extracted

• • Target
    fba42ce0edf22080a3e18e7cb2601ddb.exe
  • Size 496KB
  • SHA256 8cfde1b7c76e2116c8fc6542d73b21f9351740fb8e304a2d8f4bdf1975546bc6
  • MD5 fba42ce0edf22080a3e18e7cb2601ddb
  • SHA1 4041cbbdeb758e3abaee481aba6e405e16ec7f3d
  • SHA512 6c9e3d901b195a853dedc8af96ff08914599030d80ab796801681c6a6f00ed06079d76f7a6136f018f1b42c8ae5e7e0dc3c8c564b7f87aec156eaf344eb30f27
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon6e76410dbdf2085ebcf2777560bd8cb0790329c9discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2