Extracted

• • Target

    87b0e19ffb4c0d73067d42ac6c6406e01a03f6e19728420b1c7ba2fea946a3ee

  • Size

    229KB

  • MD5

    59ff9a165f6659701e89eca3cc1ebd63

  • SHA1

    8ca11a410bcb6870ecccd0d5c337739e04c0e2b9

  • SHA256

    87b0e19ffb4c0d73067d42ac6c6406e01a03f6e19728420b1c7ba2fea946a3ee

  • SHA512

    cc76c9ade908135b34d3902876177be9a4f9befc32b9a2159beb64869239c8d909c2a3340bfe1c29da86c4b247deabdbc0b8ac7061c289ed5d62e7984cacc068

  • SSDEEP

    3072:ZkxH09GLA6jmn1DVcLSr+uTecrhMpVHLT58+eB+/O:KxU9GLAdviy2ap+

  Score

  10^/10

  raccoonc610d498a9c34173052f3f4fcea051afdiscoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1