Extracted

• • Target

    Grit game/Grit.exe

  • Size

    740.8MB

  • MD5

    9f0bf6322632d1172c92b1c8b062b1ec

  • SHA1

    92e99aa50eb10a985d4ed942df34739e857abd23

  • SHA256

    66f628108dfac17b09627b561bb32f8139d07e8903e495f75011494e56699414

  • SHA512

    f08808074cce27c887f3f7acdd4f94af95765607757f4cbee010902b35e1ed5b7a4a6da979adb34a1c5df6033bc75210f3337ed994430304ffcfaacb63b34200

  • SSDEEP

    196608:sHGWakOHtMT0HAzUNdIsjxoSkGTTc7u9klHYf:M1ZcAzUNdtoSkCcC9v

  Score

  10^/10

  raccoon68db7c3c7f7291d80cb1883abb54ceefdiscoveryevasionstealertrojan

  • Raccoon

    Raccoon is an infostealer written in C++ and first seen in 2019.

    stealerraccoon

  • Raccoon family

    raccoon

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2