Categories: Trojan

What is “Trojan:Win32/Raccoon.QV!MTB”?

The Trojan:Win32/Raccoon.QV!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Raccoon.QV!MTB virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Authenticode signature is invalid
CAPE detected the Raccoon malware family
Collects information to fingerprint the system

How to determine Trojan:Win32/Raccoon.QV!MTB?


File Info:
name: B50BE5E158844383E565.mlwpath: /opt/CAPEv2/storage/binaries/7b0b9a47e7d16d73a905d6bf44b14bcca96748473d4da62e7a5fd2db80eec982crc32: E2963748md5: b50be5e158844383e5652d13a046c2aasha1: 07e83dc176a271b3ea1065ade6e29b802d3ae63esha256: 7b0b9a47e7d16d73a905d6bf44b14bcca96748473d4da62e7a5fd2db80eec982sha512: ee602e2ead2883d08e7418d62601d03a2c0acd0646e0f78cad3c4937d06239210e56c439541e7d9d7a7673b5cbda29be9597656ef0d78709541bc55c7e89960dssdeep: 12288:ygk2kFdddKvOn3rn0Gq/1nmrcD94AsuxWXFeLkQJIIdSOLzjygH1:ygXidKOn3rn0R1nmrc6uxIJXOeS1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D1C49E6679718077F07200B0AEBCA7A1567DBCB00A624DA773C9063D4FB15D29722B7Bsha3_384: 83573bfd442b3c48482e51d365ce6b55ca98d8cabe242fab95e9aca3e10a82a4e65eee1a20c0d61240891d1adfb009dfep_bytes: e8dc050000e974feffff3b0d50504800timestamp: 2021-11-07 12:29:14
Version Info:
0: [No Data]

Trojan:Win32/Raccoon.QV!MTB also known as:

Bkav	W32.YaccryminAA.Trojan
Lionic	Trojan.Win32.Racealer.i!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.27835
FireEye	Generic.mg.b50be5e158844383
ALYac	Gen:Variant.Doina.27835
Cylance	Unsafe
Zillya	Trojan.Raccoon.Win32.154
Sangfor	Trojan.Win32.Raccoon.A
K7AntiVirus	Spyware ( 005768171 )
Alibaba	TrojanPSW:Win32/Raccoon.f381eafd
K7GW	Spyware ( 005768171 )
Cybereason	malicious.158844
Cyren	W32/Raccoon.D.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Spy.Raccoon.A
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Raccoon-9892387-1
Kaspersky	HEUR:Trojan-PSW.Win32.Racealer.gen
BitDefender	Gen:Variant.Doina.27835
NANO-Antivirus	Trojan.Win32.Racealer.jiimzl
Avast	Win32:PWSX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10cf8797
Ad-Aware	Gen:Variant.Doina.27835
TACHYON	Trojan-PWS/W32.Racealer.581632
Sophos	Mal/Generic-S
Comodo	.UnclassifiedMalware@0
DrWeb	Trojan.PWS.Stealer.31726
TrendMicro	TROJ_GEN.R002C0DL421
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.hh
Emsisoft	Trojan-Spy.Raccoon (A)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Doina.27835
Jiangmin	Trojan.PSW.Racealer.dlm
Avira	HEUR/AGEN.1127993
Antiy-AVL	Trojan/Generic.ASMalwS.34CDECD
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.oa!s1
Arcabit	Trojan.Doina.D6CBB
Microsoft	Trojan:Win32/Raccoon.QV!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Infostealer/Win.Raccoon.R449283
McAfee	GenericRXJR-SB!B50BE5E15884
MAX	malware (ai score=84)
VBA32	BScope.TrojanSpy.MSIL.Stealer
Malwarebytes	Spyware.RaccoonStealer
TrendMicro-HouseCall	TROJ_GEN.R002C0DL421
Rising	Stealer.Raccoon!1.D913 (CLASSIC)
Yandex	TrojanSpy.Raccoon!LxCn9jySggQ
Ikarus	Trojan-Spy.Racoon
eGambit	Unsafe.AI_Score_98%
Fortinet	W32/Raccoon.A!tr
BitDefenderTheta	Gen:NN.ZexaF.34062.JqW@a0XOdVl
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.74481986.susgen