Extracted

• • Target

    ChromeSetup.exe

  • Size

    335.3MB

  • MD5

    6332e0bfbd291e2e5eb975fe505a41bb

  • SHA1

    21aa54aac93983b7dfeb99ec5d7b0a171f878c41

  • SHA256

    7aa136cc562458b6b08662f4229c81253abdcb9fae7a12e74624e62558cd3d63

  • SHA512

    dff55fb17c9a1acd47b9cc63fc14aa317b95c8d293ea73448844db733a45b2554cf2f3d29d4500d658c1e7ae69f6e2b4b3e0624e6b753c94296db58f776ce299

  • SSDEEP

    49152:pA2V4sA5q3dE0FLynxOE8ucNGkiLAiB6VoI36Bj08Qdk:pA9WE0UJkiEpZ36Bvr

  Score

  10^/10

  raccoon97ba7f533329d8e5450500fe0b5beb39stealerdiscoveryspyware

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2