Spyware.Racoon3000 malicious file

The Spyware.Racoon3000 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.Racoon3000 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the RaccoonV2 malware family
• Attempts to modify proxy settings
• Harvests cookies for information gathering
• Collects information to fingerprint the system
• Anomalous binary characteristics

How to determine Spyware.Racoon3000?

File Info:
name: C54CC125E9D8D2DBCC20.mlw
path: /opt/CAPEv2/storage/binaries/b67183548a1d80e5c1b37a644ebbe87246bb4fd16f576bb6e260577c778c0811
crc32: CD8EB710
md5: c54cc125e9d8d2dbcc20e320a5a0aa4e
sha1: 852365139d3de97c9a54b0fc39d453e0da0ff39f
sha256: b67183548a1d80e5c1b37a644ebbe87246bb4fd16f576bb6e260577c778c0811
sha512: a6c49b03ebd1a575135b4ffe6a41c4afd12b05a616d51785fc50b414b87073a2ffde3c396ff96c18e9daff720499e22ce4b16ea41077826d71ee8a452a1b3815
ssdeep: 49152:S6TyF7c/R2/LsFXbil9tvMsO2sqWbbLpoY9HyG2dypgt+7OQsoGZMIw:S6TyS6go95MDNnyh+DsE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T127B53321B013D82FCCB5B7379F22E0098972E7698F57EB4E52F1654F9DB482980A0D76
sha3_384: 101e2cd5f2cc6e735fdaaaaa7c9ca3525bff5384f67e7686fed3754d156cb627a898a6bf21603de11b75b2b3fad64746
ep_bytes: eb08008803000000000060e800000000
timestamp: 2022-08-15 12:59:17

Version Info:
CompanyName: The Enigma Protector Developers Team
FileDescription: Software Protection Tool
FileVersion: 1.2.3.4
InternalName: ENIGMA.EXE
LegalCopyright: Copyrights (C) 2002-2009 Vladimir Sukhov
LegalTrademarks: Trademarks (R) 2002-2009 Vladimir Sukhov
OriginalFilename: enigma.exe
ProductName: The Enigma Protector
ProductVersion: 1.0.0.0
Comments: http://enigmaprotector.com/
Translation: 0x0409 0x04b0

Spyware.Racoon3000 also known as:

How to remove Spyware.Racoon3000?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.