Extracted

• • Target
    24ef516b6eef6d2c7a2f212303980882.exe
  • Size 510KB
  • SHA256 25e8fb609f633e1130c0d344cdc6def1deade9ef0502f7a56a17c13dbfd0df00
  • MD5 24ef516b6eef6d2c7a2f212303980882
  • SHA1 bd0e58daa18cc6cd1eed0535c0db04d53fd6085d
  • SHA512 7c06999c3028da54f8f8bde266ff919f4d68e6ffaa16781f777dac630f8c3488b38ba934d17e5193464a296b82f9d5472fa260ed135c1412c9a4e47905eec9f3
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2