Extracted

• • Target
    a9339eb4067d104362f0efa4bf9b3add.exe
  • Size 522KB
  • SHA256 545e5ac7b0c4568049dd33037de46e8a006845563bda516818ad4e4464d580fe
  • MD5 a9339eb4067d104362f0efa4bf9b3add
  • SHA1 6c61473b22c02eb90d8db4ed09c2519fb520ae3a
  • SHA512 06901c551be55a2c4caf88c9a8f5e9634f6d12ae2163820902b5eae973a0250a88960c4715f0d7e2850ed9cc4243afd49ce98a8f4767e0fb607303645f412efa
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon8d179b9e611eee525425544ee8c6d77360ab7cd9stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2