Extracted

• • Target

    Wondershare Filmora 12 License.exe

  • Size

    838KB

  • MD5

    5560bdda88b90827215d187b9b6b3f46

  • SHA1

    799c650f0e0971d96019ef772ba37a8aa5b25784

  • SHA256

    40e374e5c98b01418e638e50cbae8ce4d2a4fbe00831e2be9a5abf2d8fba478b

  • SHA512

    3ba64aa47fc7ae1f62da76a685a97e1a7d5c2088fcafb99e28973af12444ef468dd502fd7859f934fc511fb5251ea5c0270472cf5a6bc28530e83865dd86eef8

  • SSDEEP

    12288:UVIlE+PycGgq6astN6811B15heuWHbL/tvPp4hSkfm8GlhV+FNjovV:UVIa+PyzgJastT18HhGfxGlhViNjo

  Score

  10^/10

  raccoon824e7696690cc396bc008e0c919bdc4bstealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1