Extracted

• • Target
    fd6d09acb3b73ba31accf51c31d4ee44.exe
  • Size 497KB
  • SHA256 6bfbdd4ee7699f0ddd85c8569db76c726ccf32004c6f8162c2f49e125a8ea343
  • MD5 fd6d09acb3b73ba31accf51c31d4ee44
  • SHA1 dd49caa6c8f0004484d53cbd4c51a3f44178f82a
  • SHA512 48cbe521f8601977e14e27e6e2e8c29a581dc374a2926b78740579d8feb29ae8c452ec729c0d53cd98a7c2106eb271bf72cfb3cb09e3755ef06b975fef830e6a
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2