Extracted

• • Target
    4479ba601f68339e9dc6a92d18507a93.exe
  • Size 430KB
  • SHA256 00a0b4335a8d59371783a615f8c27dfba248ef0f393151935fc6ea6dbceeec6e
  • MD5 4479ba601f68339e9dc6a92d18507a93
  • SHA1 fc4d2c5af0fdc574f12012a50a391464376f681a
  • SHA512 d5c2124e22124a5266e61290f92d33aec542805eb73ecae8462511f0a62097647b2f84100ca1871cdf1680cb05ea0d3f53bde61bafd557a2ab9a9edfe24915f6
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonf6d7183c9e82d2a9b81e6c0608450aa66cefb51fstealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2