Extracted

• • Target
    cb5f581a0b72fbdc1a926ef42cad1664abe69fd1feca0.exe
  • Size 511KB
  • SHA256 cb5f581a0b72fbdc1a926ef42cad1664abe69fd1feca0b4f3dce3a71d7e0365d
  • MD5 c1b9f4dac849b39a57f8309f0147015d
  • SHA1 cd63763d904d1c9151bee15b91db5e427dc2bf88
  • SHA512 f440bad48dc06940b635cf5700e33b0eb289e038f1c2bd4a542c2d4b82892974c007cf0b57da93f1dca1d5603918e00731445751375ec7517769bd1ddaebd4ca
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoonfa93985ba268e1dd8b72ef392332edcba95ddd45discoveryspywarestealer

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Raccoon Stealer Payload

  • Downloads MZ/PE file

  • Deletes itself

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2