Extracted

• • Target

    36dc266ad1ea8df0139336871.exe

  • Size

    3.5MB

  • MD5

    4695f98bf6e8c0908c0b6af77ec31a6c

  • SHA1

    41b05253a583238d6c583a97eb6d45e92607f53d

  • SHA256

    36dc266ad1ea8df01393368710ee6c6fd21629e833252cf0f3f63dffd908c805

  • SHA512

    b85d91a68c514e2e27d0a1b72aa7d12abed855953944eb2ab7a723a9770972b94434416a2415fc46a3aee516642121329b22eb61f80fc760d011da0ce4acfb30

  • SSDEEP

    24576:Pam/O3RT2048qUkeSLdnC/sGB9D/YBl7B3Yom6pd+e6idu6sN6FCBfcW877++aIS:PaZ3Rb4UScABl7B3YH6pd+e6i

  Score

  10^/10

  raccoon071a7b18a42c1cd94de2fc5bb0bbcaf2discoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2