Extracted

• • Target
    e48ac16b065cc964854bd3a03f091064.exe
  • Size 567KB
  • SHA256 e12ddd7e3b609ead47bc67b97ab84d69bf1a4889bd99c10e43bd32676b4bf7d2
  • MD5 e48ac16b065cc964854bd3a03f091064
  • SHA1 a259180d54f72b874c4455fdeff71eb117863be1
  • SHA512 46adfaa0631a76ffd883a8f66fa43ad30fd112fb6bb2a8a96da7f93ad76c1e9e8f1a84810cc003842d1ba948e61c2256705edb4755682638c5e5593e9138a1e3
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonf6d7183c9e82d2a9b81e6c0608450aa66cefb51fstealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2