Extracted

• • Target
    3bd9831cfe52b44cbd19c0eb7b25781a.exe
  • Size 497KB
  • SHA256 eb9d4fb59d5a62e67c2e8f119b84cdf8cbdfc57c24a086d6d9ee40b087c5f244
  • MD5 3bd9831cfe52b44cbd19c0eb7b25781a
  • SHA1 e6978d3bf2f9ab9d8f4ab23c816e961cfde89324
  • SHA512 60e974803086220050617e4ce6500cddd213f7778bc9cc22170d1f619dc914b67762150043b8618f0e688cf0d01339d137d9a357ba1a64343060db61097ed024
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2