Extracted

• • Target

    1820cb483f9fe338bfced12a6135e114.exe

  • Size

    6.2MB

  • MD5

    1820cb483f9fe338bfced12a6135e114

  • SHA1

    6861fa9e41246655528da2f3d44672aed241addd

  • SHA256

    ccc436aa842e170b71204319b12bdb63cc8ef38a339b7fb18ffa39e7f6efa50b

  • SHA512

    b7c97c8019f750e89d8108a9d156d6d4999e34d392370211c20fa6ad3c89821b02481f37122a111590904de30b18b658bc151917f80ff4adaf7af6cfa1779d7f

  • SSDEEP

    196608:dYMZbocA4xKW2Q61OlRkn3BPT9qKW4ONlk1zA2i2RkzMU8:djbocA4oPQ61MRkRPDOv2

  Score

  10^/10

  raccoon573c48a8e051f58a57dca1544700413adiscoverystealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2