Extracted

• • Target
    ec4fc93d35aed1da799e00ae289ecad9
  • Size 495KB
  • SHA256 8c14e545be830a7ea4d0c816f9a4bfd6984020f5da1725cf0ba8f2b7c86a9aba
  • MD5 ec4fc93d35aed1da799e00ae289ecad9
  • SHA1 d60a4048b948b23595dd6c024bd8015c3c2a06cc
  • SHA512 b9df04840b0457b3eeed90f8de46853d4a3ba054fa84bdc01fc4ca01d3bdfdff66bd94edd88515803278e874ff9ec9170b09f5f29a02a41a0f520fd0f1c872a9
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2