MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 61c47bc44d3877e815be609e98f97eb1b79ee1c9215646570d85cc40aa9c1317. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RaccoonStealer


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 61c47bc44d3877e815be609e98f97eb1b79ee1c9215646570d85cc40aa9c1317
SHA3-384 hash: 8de40381e2fb5cbbaabdc48e6cac013559a4abadf5afbad202e05fd0a2bdf6b92979a2c92fd813d5936db89e70674935
SHA1 hash: 9779fc80cb1e3aadf8dd1610d157f6792207d6ff
MD5 hash: e42e48df539eb3a3f4c0682b708eff52
humanhash: virginia-xray-island-early
File name:SecuriteInfo.com.BehavesLike.Win32.PUPXEU.hc.22127
Download: download sample
Signature RaccoonStealer
File size:553'472 bytes
First seen:2020-05-15 21:29:25 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash a0a9fa6380c1af60a24212d07a02c4a5 (2 x RaccoonStealer)
ssdeep 12288:5jKRqzHJc1Tgz3O2dbATH0spfmDqT+f/9Xr+N:5msl8sz3LdbDtDA+Fr+
Threatray 321 similar samples on MalwareBazaar
TLSH B0C4D001E3E1BA35E2736A369E7D97A09E3EB912EC3862D933125E4F19703E0C556712
Reporter SecuriteInfoCom
Tags:RaccoonStealer

Intelligence


File Origin
# of uploads :
1
# of downloads :
94
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Racealer
Status:
Malicious
First seen:
2020-05-15 21:35:25 UTC
File Type:
PE (Exe)
Extracted files:
70
AV detection:
27 of 31 (87.10%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Modifies system certificate store
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RaccoonStealer

Executable exe 61c47bc44d3877e815be609e98f97eb1b79ee1c9215646570d85cc40aa9c1317

(this sample)

  
Delivery method
Distributed via web download

Comments