Raccoon Stealer 2021 Log Compilation
Disclosed Sep 16, 2026
A collection of infostealer logs captured by Raccoon Stealer v1.8.2, compiled around October 2021. The archive contains data from approximately 68,000+ victim machines, organized by IP address and timestamp. Each record includes system information, browser-saved passwords, cookies, autofill data, browsing history, and screenshots. Victims appear to be primarily located in Brazil and Latin America. Sensitive data includes CPF numbers (Brazilian tax IDs), government portal credentials (sefaz.pb.gov.br), email addresses, phone numbers, and browser session cookies.
Data found in this dataset
Search this dataset
Team members search this dataset here and through the API. Access is by invitation from your team admin, or by request.
Source files
Expand any file to inspect its column headers and the field each maps to.
189.126.4.254_2021-10-09.5873__System_Info.txt0 rows
189.126.4.254_2021-10-09.5873__browsers__chrome_autofill.txt18 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
189.126.4.254_2021-10-09.5873__browsers__chrome_urls.txt0 rows
189.126.4.254_2021-10-09.5873__browsers__cookies__Google_Chrome_Default.txt53 rows
File structure
Notes: free-form text with embedded emails / phones
189.126.4.254_2021-10-09.5873__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with no consistent column structure
189.126.4.254_2021-10-09.5873__browsers__firefox_urls__names.csv0 rows
File structure
Notes: free-form text with no consistent delimiter or column structure
189.127.167.102_2021-10-08.4013__System_Info.txt0 rows
189.127.167.102_2021-10-08.4013__browsers__chrome_autofill.txt1 column1 rows
File structure
Format: CSV·Delimiter: Comma·Has header: yes·Quote: "
| Source column | Mapped field | Confidence |
|---|---|---|
| 0 | high | |
| header "email" resolves to PII field "email" | ||
Notes: Heuristic auto-detection: header-named PII columns confirmed by data conformance
189.127.167.102_2021-10-08.4013__browsers__chrome_urls.txt0 rows
189.127.179.204_2021-10-09.6419__System_Info.txt0 rows
189.127.179.204_2021-10-09.6419__browsers__chrome_autofill.txt65 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
189.127.179.204_2021-10-09.6419__browsers__chrome_urls.txt0 rows
189.127.179.204_2021-10-09.6419__browsers__cookies__Google_Chrome_Default.txt200 rows
File structure
Notes: Unstructured fallback: no PII columns mapped, but the raw text carries emails
189.127.179.204_2021-10-09.6419__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
189.127.179.204_2021-10-09.6419__browsers__cookies__Opera_Opera_GX_Stable.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
189.127.179.204_2021-10-09.6419__discord_files__Local_Storage__leveldb__002638.log.csv0 rows
190.184.217.181_2021-10-08.4651__System_Info.txt0 rows
190.184.217.181_2021-10-08.4651__browsers__chrome_autofill.txt66 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
190.184.217.181_2021-10-08.4651__browsers__chrome_urls.txt832 rows
File structure
Notes: free-form text with embedded URLs; no consistent column structure
190.184.217.181_2021-10-08.4651__browsers__cookies__Google_Chrome_Default.txt198 rows
File structure
Notes: free-form text with embedded emails / phones
190.184.217.181_2021-10-08.4651__browsers__cookies__Microsoft_Edge_Default.txt0 rows
190.184.217.181_2021-10-08.4651__browsers__cookies__Opera_Opera_Stable.txt17 rows
File structure
Notes: Unstructured fallback: no PII columns mapped, but the raw text carries emails
200.110.99.45_2021-10-08.3203__System_Info.txt0 rows
200.110.99.45_2021-10-08.3203__browsers__cookies__Firefox_0x5wrsj2.default-release.txt0 rows
File structure
Format: CSV·Delimiter: Tab·Has header: no·Quote: "
Notes: free-form text with embedded emails / phones
200.110.99.45_2021-10-08.3203__browsers__firefox_urls.txt0 rows
File structure
Notes: free-form text with embedded URLs, no consistent column structure
201.71.29.48_2021-10-08.262__System_Info.txt0 rows
File structure
Notes: free-form text with no consistent column structure; contains system and application logs but no delimited PII fields
201.71.29.48_2021-10-08.262__browsers__chrome_autofill.txt64 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
201.71.29.48_2021-10-08.262__browsers__chrome_urls.txt170 rows
File structure
Notes: free-form text with embedded emails / phones
201.71.29.48_2021-10-08.262__browsers__cookies__Google_Chrome_Default.txt221 rows
File structure
Notes: free-form text with embedded emails / phones
201.71.29.48_2021-10-08.262__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
82.129.17.79_2021-10-08.5296__System_Info.txt0 rows
82.129.17.79_2021-10-08.5296__browsers__chrome_autofill.txt15 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
82.129.17.79_2021-10-08.5296__browsers__chrome_urls.txt0 rows
82.129.17.79_2021-10-08.5296__browsers__cookies__Firefox_zhkk6rgj.default.txt0 rows
82.129.17.79_2021-10-08.5296__browsers__cookies__Google_Chrome_Default.txt61 rows
File structure
Notes: free-form text with embedded emails / phones
82.129.17.79_2021-10-08.5296__browsers__firefox_urls.txt438 rows
File structure
Notes: free-form text with embedded URLs and timestamps; no consistent column structure
AE_2.50.114.54_2021-10-08.6482__System_Info.txt0 rows
AE_2.50.114.54_2021-10-08.6482__browsers__chrome_autofill.txt3 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_2.50.114.54_2021-10-08.6482__browsers__chrome_urls.txt0 rows
File structure
Notes: free-form text with embedded URLs; no consistent column structure
AE_2.50.114.54_2021-10-08.6482__browsers__cookies__Google_Chrome_Default.txt62 rows
File structure
Notes: free-form text with embedded emails / phones
AE_2.50.114.54_2021-10-08.6482__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_2.50.18.229_2021-10-08.1225__System_Info.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_2.50.18.229_2021-10-08.1225__browsers__chrome_autofill.txt7 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_2.50.18.229_2021-10-08.1225__browsers__chrome_urls.txt0 rows
AE_2.50.18.229_2021-10-08.1225__browsers__cookies__Google_Chrome_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_2.50.18.229_2021-10-08.1225__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.193.143.206_2021-10-08.4964__System_Info.txt0 rows
AE_5.193.143.206_2021-10-08.4964__browsers__chrome_autofill.txt1 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.193.143.206_2021-10-08.4964__browsers__chrome_urls.txt0 rows
AE_5.193.143.206_2021-10-08.4964__browsers__cookies__Firefox_hhttjd6i.default-release.txt151 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.193.143.206_2021-10-08.4964__browsers__cookies__Google_Chrome_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.193.143.206_2021-10-08.4964__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.193.143.206_2021-10-08.4964__browsers__firefox_urls.txt0 rows
File structure
Notes: free-form text with embedded URLs; no consistent columnar structure
AE_5.194.105.80_2021-10-08.1449__System_Info.txt0 rows
AE_5.194.105.80_2021-10-08.1449__browsers__chrome_urls.txt0 rows
AE_5.194.105.80_2021-10-08.1449__browsers__cookies__Google_Chrome_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.194.168.197_2021-10-08.1103__System_Info.txt0 rows
AE_5.194.168.197_2021-10-08.1103__browsers__chrome_autofill.txt9 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_5.194.168.197_2021-10-08.1103__browsers__chrome_urls.txt0 rows
AE_5.194.168.197_2021-10-08.1103__browsers__cookies__Firefox_xnajrshg.default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.194.168.197_2021-10-08.1103__browsers__cookies__Google_Chrome_Default.txt180 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.194.168.197_2021-10-08.1103__browsers__cookies__Opera_Opera_Stable.txt491 rows
File structure
Notes: Unstructured fallback: no PII columns mapped, but the raw text carries emails
AE_5.194.168.197_2021-10-08.1103__browsers__firefox_urls.txt0 rows
File structure
Notes: free-form text with embedded URLs, no consistent column structure
AE_5.194.168.197_2021-10-08.1103__mails__outlook.txt4 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.31.166.1_2021-10-08.3422__System_Info.txt0 rows
AE_5.31.166.1_2021-10-08.3422__browsers__chrome_autofill.txt118 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_5.31.166.1_2021-10-08.3422__browsers__chrome_urls.txt0 rows
AE_5.31.166.1_2021-10-08.3422__browsers__cookies__Google_Chrome_Default.txt47 rows
File structure
Notes: free-form text with embedded emails / phones
AE_5.31.166.1_2021-10-08.3422__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded GUIDs and session IDs; no consistent column structure
AE_86.98.149.57_2021-10-09.6218__System_Info.txt0 rows
AE_86.98.149.57_2021-10-09.6218__browsers__chrome_autofill.txt8 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_86.98.149.57_2021-10-09.6218__browsers__chrome_urls.txt0 rows
AE_86.98.149.57_2021-10-09.6218__browsers__cookies__Google_Chrome_Default.txt0 rows
AE_86.98.149.57_2021-10-09.6218__browsers__cookies__Google_Chrome_Snapshots.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_86.98.149.57_2021-10-09.6218__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Format: CSV·Delimiter: Tab·Has header: no·Quote: "
Notes: free-form text with embedded emails / phones
AE_86.98.149.57_2021-10-09.6218__browsers__cookies__Microsoft_Edge_Snapshots.txt0 rows
File structure
Notes: free-form text with embedded cookies/tracking IDs, no consistent column structure
AE_91.73.126.102_2021-10-09.6737__System_Info.txt0 rows
AE_91.73.126.102_2021-10-09.6737__browsers__chrome_autofill.txt3 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_91.73.126.102_2021-10-09.6737__browsers__chrome_urls.txt81 rows
File structure
Notes: free-form text with embedded emails / phones
AE_91.73.126.102_2021-10-09.6737__browsers__cookies__Microsoft_Edge_Default.txt18 rows
File structure
Notes: free-form text with embedded emails / phones
AE_91.73.7.91_2021-10-08.2253__System_Info.txt0 rows
AE_91.73.7.91_2021-10-08.2253__browsers__chrome_autofill.txt7 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_91.73.7.91_2021-10-08.2253__browsers__chrome_urls.txt0 rows
AE_91.73.7.91_2021-10-08.2253__browsers__cookies__Google_Chrome_Default.txt391 rows
File structure
Notes: free-form text with embedded emails / phones
AE_91.73.7.91_2021-10-08.2253__browsers__cookies__Google_Chrome_Profile_1.txt0 rows
AE_92.96.123.57_2021-10-08.1676__System_Info.txt0 rows
AE_92.96.123.57_2021-10-08.1676__browsers__chrome_autofill.txt16 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_92.96.123.57_2021-10-08.1676__browsers__chrome_urls.txt0 rows
AE_92.96.123.57_2021-10-08.1676__browsers__cookies__Google_Chrome_Default.txt0 rows
AE_92.96.123.57_2021-10-08.1676__browsers__cookies__Microsoft_Edge_Profile_1.txt0 rows
File structure
Format: CSV·Delimiter: Tab·Has header: no·Quote: "
Notes: The file is unstructured telemetry log data from Raccoon Stealer. It contains no consistent column structure or PII fields; entries are system telemetry events with no personal information.
AE_92.96.140.209_2021-10-08.3561__System_Info.txt0 rows
AE_92.96.140.209_2021-10-08.3561__browsers__chrome_autofill.txt0 rows
File structure
Notes: free-form text with embedded usernames
AE_92.96.140.209_2021-10-08.3561__browsers__chrome_urls.txt0 rows
AE_92.96.140.209_2021-10-08.3561__browsers__cookies__Microsoft_Edge_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_92.98.62.68_2021-10-08.109__System_Info.txt0 rows
AE_92.98.62.68_2021-10-08.109__browsers__chrome_autofill.txt65 rows
File structure
Notes: Pre-LLM auto-detection: free-form text with visible emails / phones
AE_92.98.62.68_2021-10-08.109__browsers__chrome_urls.txt0 rows
File structure
Notes: free-form text with embedded URLs, no consistent column structure
AE_92.98.62.68_2021-10-08.109__browsers__cookies__Google_Chrome_Default.txt0 rows
File structure
Notes: free-form text with embedded emails / phones
AE_92.98.62.68_2021-10-08.109__browsers__cookies__Microsoft_Edge_Snapshots.txt197 rows
File structure
Notes: free-form text with embedded emails / phones