Family comparison

META StealerRedLine StealerRaccoon Stealer
Capability
META StealerActive
RedLine StealerActive
Raccoon StealerActive
PlatformWindowsWindowsWindows
Dark Radar infection records2,270,42610,592,8182,226,357
Credentials
Browser passwordsVerifiedVerifiedVerified
Session cookiesVerifiedVerifiedVerified
Refreshing expired sessions———
AutofillVerifiedVerifiedVerified
macOS Keychain———
2FA and password managers———
Financial
Saved cardsVerifiedVerifiedVerified
Desktop crypto walletsVerifiedVerifiedVerified
Wallet extensionsVerifiedVerifiedVersion-dependent
Clipboard address replacement———
Applications
Email clients—Version-dependent—
FTP clientsVerifiedVerified—
VPN clientsVersion-dependentVerified—
Messaging applicationsVerifiedVerifiedVersion-dependent
Gaming platformsVerifiedVerified—
System
File collectionVerifiedVerifiedVerified
Screenshot—VerifiedVerified
System inventoryVerifiedVerifiedVerified
Behavior
Additional payload downloadVerifiedVerifiedVerified
Persistence———
Anti-analysis———
Verified
Version-dependent
Reported
Dark Radar observation
Not observed