Extracted

• • Target

    !Z@#Setups-Pa$$W0rd-4545/Pre_Updated_Setup.exe

  • Size

    771.6MB

  • MD5

    ce498d59fae27f5c42cda32c26d43520

  • SHA1

    0eef9a1941d93e04cd6797ed6c79c6ca202f40dc

  • SHA256

    12dd22f3a312b2558caa2ccea1796a4b7ca7d5635c703175e0289e6590b48220

  • SHA512

    8c64f222d5322f3324b6658c9bee77c6233cce4c9120a4c1e30181e9c33fe0f6aec67d67d1c27dff6657a2bb6195d0a80bf6ca4cdc5cf054dca1be3ac65f6daa

  • SSDEEP

    25165824:znnnnnnnnnnnnnnnnnnnnn3nnnnnnnnnnnnnnnnnnnnn3nnnF:znnnnnnnnnnnnnnnnnnnnn3nnnnnnnn1

  Score

  10^/10

  raccoond843e8fa1ee1dfc195b20362a6b5cd71discoveryspywarestealervmprotect

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2