Extracted

• • Target

    CompleteSetup_2023_As_PassWord/Full_SetupFile.exe

  • Size

    1023.2MB

  • MD5

    2b6c3410f4d064e69bb0d47d7e94132c

  • SHA1

    4c51abdba654277f6d0c5ceb18c5dd6c4fd7bb47

  • SHA256

    6d0626d9b90abe1d422ace8bd33c8024ea321499104ae95172c2d7a10a9cfc7c

  • SHA512

    644c7d2e25d63afbd9f5719a8dcef5c2fdda1b756392be5d1efe9320953256cb6e70139a62a6a9fd1522c1b3172fafc297eb4cc93129efad7135f78922f679c5

  • SSDEEP

    196608:NYzLzScvgh3AADZ7sMHEXBhb8Jrznl32LUTxqLrkSdNMjGYQcH7WTyCWxxPajesG:mjScvgh3A4dLHEx0rILKxC3+bGy96eyg

  Score

  10^/10

  raccoon23883deb102ef0839fbfe8fcef1a5fc7discoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2