Extracted

• • Target
    eebe0a3c1464ed9b35575112c7d6e9f6.exe
  • Size 402KB
  • SHA256 d88cee541b91f230a8b19b5bb601970b3079c9168eb1e4e243000f8a2a675966
  • MD5 eebe0a3c1464ed9b35575112c7d6e9f6
  • SHA1 6a57b5355dfa3df0a80bbf96bcce3c0010abc887
  • SHA512 621f9b99eb58aa3f2fd933685ac08323ba94f488f564a14e0c1fe62a0b85d9b002ce69d2c1f7c0d8bede136e4d6bf9e761740709059a816c602d9d3286afa688
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2