Extracted

• • Target

    License/Driver Booster 11 PRO License.exe

  • Size

    770KB

  • MD5

    27cf0c7d37e5ffbab9b1a163544f3321

  • SHA1

    3ed7493f213a01f7c99a4d11f56cfa7f79f90d0a

  • SHA256

    4f6eba5f100a37005509d15782ca2991de72d027be766ba779f20e956555c29b

  • SHA512

    f9ac54ee39c7192406a51a6e506b420387b2314facc31656b1acd3a69fdcb3060553b42122c5a6f5092083d71c20d4304b1ed067e9b1e481951c1a4798e0fa2d

  • SSDEEP

    12288:HtLqu6mmCXykkkkkkkBgEgEQJrQXSmsw71AfyffvnZYyGPlWHiCXIEwc+4iAxtz+:HtLWjQXDsw+fAXnZWWHLfwcvxzF7di

  Score

  10^/10

  raccoonccf92b7fb8bdc5b3c5b2cea72a452ab2stealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer V2 payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2