MALWARE FAMILY

RecordBreaker

Internal ID: win.recordbreaker

aliases

Last seen:Mar 17, 2026

Intelligence Profile

This malware is a successor to Raccoon Stealer (also referred to as Raccoon Stealer 2.0), which is however a full rewrite in C/C++.

Threat Analysis

RecordBreaker is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→https://any.run/cybersecurity-blog/raccoon-stealer-v2-malware-analysis/

→https://asec.ahnlab.com/en/52072/

→https://blog.cyble.com/2022/11/08/massive-youtube-campaign-targeting-over-100-applications-to-deliver-info-stealer/

→https://cloudsek.com/recordbreaker-the-resurgence-of-raccoon

→https://cocomelonc.github.io/malware/2025/01/19/malware-tricks-44.html

→https://d01a.github.io/raccoon-stealer/

→https://decoded.avast.io/threatresearch/avast-q2-2022-threat-report/

→https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-recordbreaker-f6400c11d58b

→https://info.spamhaus.com/hubfs/Botnet%20Reports/2022%20Q3%20Botnet%20Threat%20Update.pdf

→https://info.spamhaus.com/hubfs/Botnet%20Reports/2023%20Q1%20Botnet%20Threat%20Update.pdf

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.recordbreaker

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search RecordBreaker