Extracted

• • Target

    2035adb734e272d7bba98ab34faa9a5ee0457ea24b940688d1cfd8ba622988f1.exe

  • Size

    10.5MB

  • MD5

    02a0844e14c943fda141728ceccc1c8c

  • SHA1

    681ff95d20d4b20c51d50b0da2890fd6b3a30a87

  • SHA256

    2035adb734e272d7bba98ab34faa9a5ee0457ea24b940688d1cfd8ba622988f1

  • SHA512

    0946fc37b57509ef94777eeefc71dcffd068a89146e37e0c6567bc2a3c32499de4b2ccb4fe68eff64762e76af16ef391c0c7b937e33d4a65b0332591f5f6dac2

  • SSDEEP

    196608:nNjXgrvo5xsSYBmIOhdxfCxs5sFRXTQojht33KL7GYf0hgIcqmi/SWxM21r8:teoYLOxfC65YRjzht36+VgM6Wxg

  Score

  10^/10

  raccoon9acc0b4b109f517573794147c09af4c8discoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2