Extracted

• • Target
    be01323b80fba9b067b964f32fb09b79.exe
  • Size 541KB
  • SHA256 1e89e268686b120ae6e58ebfc87c5a532d227a54c35bc3b01ed1b992503f64e2
  • MD5 be01323b80fba9b067b964f32fb09b79
  • SHA1 3cab41e92e0c6b2cc63e53f7e55b22db566d000a
  • SHA512 73fa1a25fa7fccaa874d0f5e450870d93e1710991057e3af423b6b7089f30b046959e7f6f85a0e2c53b6d936b91141b4b33dcbaa676b9489e98c6bdd8d0df871
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon�!!9fe�b[_����� {�����b1*`�`�bb�n�x�discoveryspywarestealersuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2