Extracted

• • Target
    cb0864ccb6b66c3109effeb18056f414.exe
  • Size 534KB
  • SHA256 cd76c1f1215d5487e9bb89ecc64ae3046b475004ce9a99a6d4d33c554a819af8
  • MD5 cb0864ccb6b66c3109effeb18056f414
  • SHA1 8c5573da5df050caa2f91b3af16bd58a54bf98c8
  • SHA512 216dd0fdf53d56ede50a62d70f349dde2bbb5e0c2e8385353d1a59e455cde4fb921627b67cda9e905dfb52f44cb3f2f188b776e241d900dd3ad092a43892d8e5
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon32d5e6449b6744aa586038532e2d41d15ce4f201discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2