Extracted

• • Target
    8861d82e3ab13c9f81736bad53ed775e.exe
  • Size 551KB
  • SHA256 3dc9dcc24d43d7c83c201bd058a0e943dac4866ccea382d362dc974ca7905f77
  • MD5 8861d82e3ab13c9f81736bad53ed775e
  • SHA1 79d7621e1da46a85d0498571b5b33424f58f9f8a
  • SHA512 c861115e208c0c75f1b74ef3feddf24457e4afe925907fe917e5ffaccec2ee4cfb8b55003f2424b5f2636b198e7a2847cfec9fc4c664f48c820e46c9b47ef02c
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2