how do i disable rc4 in pale moon browser

The first submission date of this sample to VirusTotal is from early August 2021. Subscribers also have access to a DLL version. The build of Raccoon that was analyzed for this post is a 32-bit Windows executable. This “division of responsibility” reduces the size of the primary executable. After network credentials, cookies, and crypto wallets have been exfiltrated, all working folders and the main Raccoon executable are deleted from the victim’s disk.ĭependencies that enable the credential-harvesting function of Raccoon are delivered as a ZIP file of DLLs, which is downloaded as part of its execution. Raccoon is often deployed in a “hit-and-run' manner. Past campaigns have been delivered via exploit kits, spam emails with malicious attachments (such as Microsoft ® Word documents with macros), and SEO-optimized search results for game cheats and application “cracks.” The method of delivery for Raccoon is also chosen by the subscriber. Doing so could help prevent detection by legacy signature-based endpoint protection.

Packing and protecting a Racoon build is the responsibility of each subscriber. The cost of a monthly subscription to Raccoon is under USD $100, with discounts available for longer commitments.

This level of “customer service” elevates their position within the cybercriminal community as a reputable and reliable service provider. Their focus on responsive support is reflected in testimonials, positive reviews, and reported high levels of subscriber satisfaction. Raccoon’s authors seem to take pride in promptly fixing issues and addressing end-user support requests. Russian forum posts promoting Raccoon infostealer specifically mention a “specialist team” being responsible for its development. Raccoon is, and continues to be, the work of a dedicated team rather than the work of a single individual. It was first seen in the wild in April of 2019. A preliminary version of this threat was brought online in January of 2019, as indicated by database dump that was leaked by an apparently disgruntled member of the development team. Raccoon is considered by its “customers” and by researchers to be a replacement for the now-defunct Azorult information stealer.

How do i disable rc4 in pale moon browser