Extracted

• • Target
    87a65d4d7c02dfbfdfcbe2e574bcb030.exe
  • Size 521KB
  • SHA256 3bd87df107b7f796664419c54716ea4dc9a2c6a4b34efa85eb1eb75f6458b13b
  • MD5 87a65d4d7c02dfbfdfcbe2e574bcb030
  • SHA1 17d9d0937e280779ad3181c5138ed534fc8aea2e
  • SHA512 d718117f49a333f300a2010f01ac9d531f05e3815c20213575ca145b50a64b3b3ad90dd9b13c2eb4085a20e8ccf0d3218a21fb1f7aab39e7d2cd1f5084af416f
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon8d179b9e611eee525425544ee8c6d77360ab7cd9stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2