Extracted

• • Target
    5188d363eddcb1e31c155343c845ac87.exe
  • Size 430KB
  • SHA256 f2003d2fa7f7d22caee50d4c6f4c8aa4ff9a8ab6010c94d1629a86ce57a52a76
  • MD5 5188d363eddcb1e31c155343c845ac87
  • SHA1 fae2d9d710a54054a5ae407c864bafa8e4ada752
  • SHA512 592eb353cab08ca2b45bee14cae4de34e3229ab7a08f5fdfbe5fb42f7b1026067f94022540260692a38ff587a71e7a875e93c15a3c19c4eab576efc475790ad0
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonf6d7183c9e82d2a9b81e6c0608450aa66cefb51fstealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2