RecordBreaker

First seen
2023-02-01 00:00:00
Malware type
credential-stealer
Family
Malware family
Last IoC activity
2026-07-22 02:34:10
Profile updated
2026-07-07 13:11:25

Targeted industries: financial-services retail-and-hospitality

Context

This malware is a successor to Raccoon Stealer (also referred to as Raccoon Stealer 2.0), which is however a full rewrite in C/C++.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Recordbreaker_Auto (yara-rule)

Reports & references

  • decoded.avast.io — Avast Q2 2022 Threat Report (report)
  • info.spamhaus.com — 2022%20Q3%20Botnet%20Threat%20Update (report)
  • info.spamhaus.com — 2023%20Q3%20Botnet%20Threat%20Update (report)
  • info.spamhaus.com — Q4%202023%20Botnet%20Threat%20Update (report)
  • info.spamhaus.com — 2023%20Q1%20Botnet%20Threat%20Update (report)
  • info.spamhaus.com — 2023%20Q2%20Botnet%20Threat%20Update (report)
  • cocomelonc.github.io — Malware Tricks 44 (report)
  • cloudsek.com — Threat Actors Abuse Ai Generated Youtube Videos To Spread Stealer Malware (report)
  • prodaft.com — Rig Tlp Clear 1 (report)
  • cloudsek.com — Recordbreaker The Resurgence Of Raccoon (report)
  • d01a.github.io — Raccoon Stealer (report)
  • socinvestigation.com — Raccoon Infostealer Malware Returns With New Ttps Detection Response (report)
  • bleepingcomputer.com — Amp (report)
  • infosecwriteups.com — Raccoon Stealer V2 Malware Analysis 55Cc33774Ac8 (report)
  • cybercrimediaries.com — Russian Language Cybercriminal Forums Analyzing The Most Active And Renowned Communities (report)
  • zscaler.com — Raccoon Stealer V2 Latest Generation Raccoon Family (report)
  • g0njxa.medium.com — Approaching Stealers Devs A Brief Interview With Recordbreaker F6400C11D58B (report)
  • any.run — Raccoon Stealer V2 Malware Analysis (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Recordbreaker (report)
  • socprime.com — Raccoon Stealer Detection A Novel Malware Version 2 0 Named Recordbreaker Offers Hackers Advanced Password Stealing Capabilities (report)
  • googlecloudcommunity.com — 803490 (report)
  • blog.cyble.com — Massive Youtube Campaign Targeting Over 100 Applications To Deliver Info Stealer (report)
  • youtube.com — Watch (report)
  • malwarebookreports.com — The Trash Panda Reemerges From The Dumpster Raccoon Stealer V2 (report)
  • asec.ahnlab.com — 52072 (report)

External references