RECORDSTEALER malware
RecordBreaker (Raccoon Stealer v2) is a native information stealer sold as malware-as-a-service. It downloads its legitimate helper libraries from the C2, then steals browser data, wallets and files.
Malva.RE has analysed 66 public samples tagged RECORDSTEALER, statically and without execution. The latest public sample was seen on 2026-10-19.
File types
- PE Executable38
- ZIP Archive2
Recurring C2 endpoints
196[.]251[.]107[.]104:19121176[.]46[.]152[.]46:19111
Defanged. Extracted statically from the configurations of public samples.
Latest public RECORDSTEALER samples
Analyse your own RECORDSTEALER sample
Malva.RE unpacks, decompiles and extracts the configuration of suspicious files statically — the file is never executed. Free-plan reports are public.
Analyse a file for free