Extracted

• • Target
    4bc3ac49baa6da41b0c509a1b0c72436
  • Size 506KB
  • SHA256 57a7b15cd3b962e738b9c36b8d9dc2c16f3fa8efeafa1f9d2996fa8231a208e3
  • MD5 4bc3ac49baa6da41b0c509a1b0c72436
  • SHA1 9380406887e551367200ffbcf1759256294b56c0
  • SHA512 af4717e9b94c9a0a0bc8cef91d93b493518571965bff5c5886ca38d5d49a2ba5f353e2f449224320d480110750cf5549448c1c391473c219fff81a9668a5bb3b
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2