MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4731793f286679eb3d28c39ec54f519592cfdbedeb2e5a9435f798c8472983a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 1 File information 3 Yara Comments

SHA256 hash: 4731793f286679eb3d28c39ec54f519592cfdbedeb2e5a9435f798c8472983a2
SHA3-384 hash: 7e59d6f65389b177d17d4133726555d1764975a99201a7b16d5f4802ac422d78de91d45fc7e25ef96ea8e3b9c9216122
SHA1 hash: 344580b5fb2fd4e027c835b0207bea7df329bb15
MD5 hash: 8af0dcffe5e027e94a9b48497a8601fa
humanhash: vermont-apart-hydrogen-texas
File name:8af0dcffe5e027e94a9b48497a8601fa.exe
Download: download sample
Signature RaccoonStealer
File size:584'704 bytes
First seen:2020-06-29 19:29:38 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 1fd7f3fa38ad4a10070b9dbdf2847350
ssdeep 12288:4H5shMNrmuXL4EgNLJ9o9M7U433Vjyh+v6jpVOeXcK17afXLclz:vCNrmuXkN7o9e7HTvSyeVcDclz
TLSH C7C412C23781C076D4663530B514E6722F7EBC7142246187B7A82F3A6EF39905EBAF16
Reporter @abuse_ch
Tags:exe RaccoonStealer


Mail intelligence No data
# of uploads 1
# of downloads 30
Origin country US US
CAPE Sandbox Detection:n/a
ClamAV PUA.Win.Downloader.Aiis-6803892-0
CERT.PL MWDB Detection:raccoon
ReversingLabs :Status:Malicious
Threat name:Win32.Trojan.Kryptik
First seen:2020-06-29 19:31:05 UTC
AV detection:23 of 31 (74.19%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
Hatching Triage Score:   10/10
Malware Family:raccoon
Tags:ransomware evasion spyware trojan discovery stealer family:raccoon
VirusTotal:Virustotal results 27.78%

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download


Executable exe 4731793f286679eb3d28c39ec54f519592cfdbedeb2e5a9435f798c8472983a2

(this sample)

Delivery method
Distributed via web download