Extracted

• • Target

    2513cf6aa56a6fb9c84061ac04c8df3e225258638f9f0d40ce898a9096f93e9b.exe

  • Size

    241KB

  • MD5

    2c456231b6d0745678d27477f46a78ec

  • SHA1

    13c2ffb4bf48f98ff6ca5f2ea082480a082d6321

  • SHA256

    2513cf6aa56a6fb9c84061ac04c8df3e225258638f9f0d40ce898a9096f93e9b

  • SHA512

    a82f6021467bf6f9f7d8026b5fdfe96660330e6d36175cfcad649e70688875ff26588528464ae80063f6311c5c7392cd3fdaa69562068414412c912279455296

  • SSDEEP

    3072:/7TLJivCcb1nX/DBQ67rlMQ5kgN0LucGuW0d3WJ4K/:TTLJtgX/d77q5gN0CjRbJ4K

  Score

  10^/10

  raccoon6bb5fbdb7121bc7ea628330bef79c129discoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2