Extracted

• • Target
    c6af8f29ae58334bc6aacf4f4d7e2401.exe
  • Size 555KB
  • SHA256 a4e96ae6829639366a4f4ecad2a0783cbe4dae67dd27bf91e525c742a2bc19f3
  • MD5 c6af8f29ae58334bc6aacf4f4d7e2401
  • SHA1 8d7446c82bdfe514b51b9a5c4f9f3da60e7dd268
  • SHA512 aa0b00ba3aea7485f1a4f5ce41f233d58354846f53eeeaef9335cf4e75c3474cc61d58516c5e363dd4b5bc69c676dc18b730b2731a01b2e862d3f418bf66a5a2
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonb9905b767dbd1678bb046cbc1696faa3058ae6bastealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2