Raccoon Stealer v2 - Part 1: The return of the dead

Raccoon Stealer v2 is a rewritten C/C++ information stealer observed in the wild since May–June 2022 that targets popular browsers and desktop cryptocurrency wallets, harvests credentials and cookies, captures screenshots, grabs files across disks, and exfiltrates data via HTTP POST to numerous C2 servers; the report provides a step-by-step technical analysis, MITRE ATT&CK mappings, extensive IoCs (C2 IP addresses and SHA-256 hashes), and warns of a likely resurgence and future enhancements by the developers.