Family comparison

Raccoon StealerMETA StealerRedLine Stealer
Capability
Raccoon StealerActive
META StealerActive
RedLine StealerActive
PlatformWindowsWindowsWindows
Dark Radar infection records2,226,3572,270,42610,592,818
Credentials
Browser passwordsVerifiedVerifiedVerified
Session cookiesVerifiedVerifiedVerified
Refreshing expired sessions———
AutofillVerifiedVerifiedVerified
macOS Keychain———
2FA and password managers———
Financial
Saved cardsVerifiedVerifiedVerified
Desktop crypto walletsVerifiedVerifiedVerified
Wallet extensionsVersion-dependentVerifiedVerified
Clipboard address replacement———
Applications
Email clients——Version-dependent
FTP clients—VerifiedVerified
VPN clients—Version-dependentVerified
Messaging applicationsVersion-dependentVerifiedVerified
Gaming platforms—VerifiedVerified
System
File collectionVerifiedVerifiedVerified
ScreenshotVerified—Verified
System inventoryVerifiedVerifiedVerified
Behavior
Additional payload downloadVerifiedVerifiedVerified
Persistence———
Anti-analysis———
Verified
Version-dependent
Reported
Dark Radar observation
Not observed