Extracted

• • Target
    23bb2b965749d3e7b49755ace3f1911d.exe
  • Size 494KB
  • SHA256 658232b7dc41c07c874649e2c83ed12a1db65473e73eb4a1beea82aaea2abb49
  • MD5 23bb2b965749d3e7b49755ace3f1911d
  • SHA1 f2075c1b31f233ef300b9ed0cb571997edbe8d36
  • SHA512 b03596c75040db36982c149c9b166bf1cfa23b8e52307a7d35b3b5e606e208319dac357c0ddfac03c30c49fc3d24f97deb07a83155dc0fd30937574f773a0cfb
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonf6d7183c9e82d2a9b81e6c0608450aa66cefb51fstealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2