What is Raccoon infostealer V2?

Raccoon Stealer is back on the news again. US officials arrested
Mark Sokolovsky, one of the malware actors behind this program. In
July 2022, after several months of the shutdown, a Raccoon Stealer
V2 went viral. Last week, the Department of Justice’s press release
stated that the malware collected 50 million credentials.

This article will give a quick guide to the latest info
stealer’s version.

What is Raccoon infostealer V2?

Raccoon Stealer^[1]
is a kind of malware that steals various data from an infected
computer. It’s quite a basic malware, but hackers have made Raccoon
popular with excellent service and simple navigation.

In 2019, Raccoon infostealer was one of the most discussed
malware. In exchange for $75 per week and $200 per month,
cybercriminals sold this simple but versatile info stealer as a
MaaS. The malware was successful in attacking a number of systems.
In March 2022, however, threat authors ceased to operate.

An updated version of this malware was released in July 2022. As
a result, Raccoon Stealer V2 has gone viral and gained a new name –
RecordBreaker.

Raccoon v2’s tactics & techniques in ANY.RUN Sandbox

How to analyze Raccoon stealer V2

We have triaged multiple Raccoon stealer V2 samples, collected
typical behavior activities, and briefly described its execution
process.

Read deeper and more detailed Raccoon stealer 2.0 malware
analysis^[2]. In the article, you can
follow all steps and get a complete picture of the info stealer’s
behavior. Besides this profound research, you get a chance to
extract malware configuration by yourselves – copy the Python
script of Raccoon stealer and unpack memory dumps to extract
C&C servers and keys.

Raccoon v2 malware configuration

Where to analyze malware

Do you want to analyze malicious files and links? There is a
fast and easy solution: get ready-made configurations in ANY.RUN online malware sandbox^[3] and investigate
suspicious files inside and out. Try to crack any malware using an
interactive approach:

The ANY.RUN sandbox lets you analyze malware quickly, navigate
through the research process easily, detect even sophisticated
malware, and get detailed reports. Use smart tools and hunt malware
successfully.