Extracted

• • Target

    SecuriteInfo.com.Variant.Lazy.509335.4668.31067

  • Size

    89KB

  • MD5

    d0fa79fc637c5916da8d7c2f07948933

  • SHA1

    d4fb639fe811739c4adf2e62b5df1f8c9ab35c75

  • SHA256

    1dc9190028637257765735e9e8956d0a2ef2710055fdfc873240c7f09098b7e9

  • SHA512

    68bca697a0cb607b6d813ddd4656afaa617384dbbafecda6b4f03685da8fba8603d761e0cb56841a778e59908064ff93261e80bc2f19f6898240d0b2dd65dd4c

  • SSDEEP

    1536:2PX4YBLPitzZgglqlwEmnFN+br133phXZ4gDjyAKrsTBLviJYPx5OSbDU9oBdh02:ZzZggAlwEAAbryXsTBTiJYPx5OSbEoBN

  Score

  10^/10

  raccoon8401e21bbb0060afb24ce21fda90f5cbdiscoveryspywarestealer

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon Stealer V2 payload

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Suspicious use of SetThreadContext

  behavioral1behavioral2