Extracted

• • Target
    6498f1b5556f9ad1998b20313a6b0d77.exe
  • Size 278KB
  • SHA256 63063e348f64b0e237c00a0adb6ca1d2d7020898192834f68d2dad4956a04e4a
  • MD5 6498f1b5556f9ad1998b20313a6b0d77
  • SHA1 ca3d7b86e13d3477b984738582bf926bbf274048
  • SHA512 77967b4ee1e9e3ffce19107f1bdcd783d1873f40543f39f73cd9fb7fa85a8a99aa297ce755d58f7137042d48bd0c5bdb9034a0fdd4e1b8824d6d4ddd18ec36cf
  • SSDEEP 3072:nlh4LI7aTKNpjfDdNL29qhKUkddxJ0USD8gXX8TOzC+wA4Qh/+d2l6GkdM2Dq:lh4DTK/jLi8D8gXXlBw451l6ZdMf
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  raccoond1d6daf7a5018968dea23d67c142f047discoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2