Extracted

• • Target
    2b07917caf45863a6a977b356823d452.exe
  • Size 550KB
  • SHA256 2e12a1501738b4c3c805c47e720f4e23a1ab3ad54130085fe3d1f337aed0f232
  • MD5 2b07917caf45863a6a977b356823d452
  • SHA1 d806f0f6e7896ac61b65d74a82dd83a03ea9e5eb
  • SHA512 61379b07d3165c190469e5213052ff850357e62d9e69b27ea53f71e6dbb1e826c57d0272fbbec30891f940255b11757675f0c47dec4e025aa2056cf68780c7ef
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2