Extracted

• • Target
    Setup.exe
  • Size 428.0MB
  • SHA256 ef70efe0a3cd860831657fa7ee8d832d49c8d8489df4b35d2480cc043bbb1b04
  • MD5 9d2b9885fdb0885ac11bd944c86c4655
  • SHA1 eeeebef1fd514f1b697158c990ba94b9c752374c
  • SHA512 6ca0fe74cec6b22e9d9da927614cfed8440d153f8852fc938b7f156b95c29ddca7b652557635ebb6aa7197ad37c0a09d475deedddc44316ddac929cdac7b4813
  • SSDEEP 98304:b8vH233wZUFkCNauJm+UPp7WMZwa/jOTN:bowwP+UxaMZxbOT
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  raccoonb4f472421ce1f18efd9f610339c3dae1evasionstealerthemidatrojan

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2