Extracted

• • Target
    fe8aa7e0bb26744c58dd5090e75d2d58.exe
  • Size 584KB
  • SHA256 13d64ea9d98adb90dcbd7fec75d8932ff4dc6b11ef206472bb8919310c8c6924
  • MD5 fe8aa7e0bb26744c58dd5090e75d2d58
  • SHA1 5063e8586ecc768a2ae242602a3ac61b10ca7789
  • SHA512 8d1fde88d6fe5f36bd9699ec41c37d645d72f62b6cdb29f978b779dbda1b0bb3311dcd61c4d0e38cfe0d160d9f670b4775017415d9aba98b4a2e15965cfa8882
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2