Extracted

• • Target
    58bc6d515945a308bfc35358455c96ed.exe
  • Size 402KB
  • SHA256 ddc293e024821f0870ae59a138e5b9b78047fa2d109e954e18bdfdd6c3ac4c41
  • MD5 58bc6d515945a308bfc35358455c96ed
  • SHA1 b2486bf163f7c3ee1c577106418ec90b0af58c16
  • SHA512 0c06cf503afd66797dbdb25bbe83f20c114a6ea10bfbcaa8888b92113f202476405b8e4e5b482f8119ee5990a5933cf1f3e0a236a2220899a872a76ad178b9f7
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonf6d7183c9e82d2a9b81e6c0608450aa66cefb51fstealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2