Extracted

• • Target

    6551e9616b37445157fe31376073ac2b63145d600087847c29582b3289a03753

  • Size

    257KB

  • MD5

    06205daf41431e8258345c39d63f2054

  • SHA1

    0883aa3481d0394cad8bef15eec3129cf8e3be90

  • SHA256

    6551e9616b37445157fe31376073ac2b63145d600087847c29582b3289a03753

  • SHA512

    e793d570566f18e6fb664f86854a5f31e63f2772a04e24dfb2bcbaf92310996ef7dfd934bdf22e50c6f766c8beb95c94fcc52aab4255eb51aaf8bf1aeed03e62

  • SSDEEP

    3072:HRFbvXq2ORIjgjmNjUWMK88bswGlRWpJkFtWnTGyOuArcSo:xFDa2YIcjoV/+lRWpJkFtK8x

  Score

  10^/10

  raccoonc610d498a9c34173052f3f4fcea051afdiscoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1