Extracted

• • Target
    4b93ae1d98090abef8bbb666b5c3dbc9.exe
  • Size 584KB
  • SHA256 6468e058014074558c7d2f81db2d08d4f662771b147c608eea867191ceeeab09
  • MD5 4b93ae1d98090abef8bbb666b5c3dbc9
  • SHA1 8fc4b45b855162ecf1092a8d7be4c16a5d2ded15
  • SHA512 dc149d3ed428757bc7938dce051c9079add56f796b125f6fd958087337e5c5cf5b10277d960368a005a831f554b7b6c7a9645eca4fcf0c66a15b3d9ddfb8334b
  • MD5 SHA1 SHA512

  Score

  10^/10

  raccoon5ff0ccb2bc00dc52d1ad09949e9c7663bc9ca4d4stealerdiscoveryspyware

  • Raccoon

    Simple but powerful infostealer which was very active in 2019.

    stealerraccoon

  • Downloads MZ/PE file

  • Loads dropped DLL

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2