Extracted

• • Target
    5a8ed9786ec775c0f7c2de1144ade87e.exe
  • Size 551KB
  • SHA256 ac31fdbcef9e66a614a8c726cfd7da59ab3191832d84faffc77845672412debe
  • MD5 5a8ed9786ec775c0f7c2de1144ade87e
  • SHA1 0a8ccf0136014395892e85131875b8cc8dbf3eff
  • SHA512 a9e77cea5a17a20b6e798572f34bd7140cd65fb005732e75ca40bee19489ef9e9a2a88f9e474286ad145e17b9c8ac051fa754382306e6a90211970ee2b04ba9c
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspywaresuricata

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata: ET MALWARE Win32.Raccoon Stealer CnC Activity (dependency download)

    suricata

  • suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata: ET MALWARE Win32.Raccoon Stealer Data Exfil Attempt

    suricata

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2