2c9784db3aa2c98c998ffc67351099c845ce1ceed319102331b58b380af96384 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

bloxflareV...oof.js

windows10-2004-x64

8

bloxflareV...oof.js

windows11-ltsc_2024-x64

8

bloxflareV...und.js

windows10-2004-x64

3

bloxflareV...und.js

windows11-ltsc_2024-x64

8

bloxflareV8/bridge.js

windows10-2004-x64

3

bloxflareV8/bridge.js

windows11-ltsc_2024-x64

3

bloxflareV...ent.js

windows10-2004-x64

3

bloxflareV...ent.js

windows11-ltsc_2024-x64

3

bloxflareV...min.js

windows10-2004-x64

3

bloxflareV...min.js

windows11-ltsc_2024-x64

8

bloxflareV8/relay.js

windows10-2004-x64

3

bloxflareV8/relay.js

windows11-ltsc_2024-x64

3

bloxflareV...oof.js

windows10-2004-x64

3

bloxflareV...oof.js

windows11-ltsc_2024-x64

8

Resubmissions

05/09/2026, 01:41

260905-b4ebrs1xft8

05/09/2026, 01:40

260905-b3nh2sdj2w8

05/09/2026, 01:21

260905-bqpkks1wds8

05/09/2026, 01:17

260905-bnpska1wav8

Analysis

max time kernel
899s
max time network
504s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 01:41

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

bloxflareV8/auth-spoof.js

Resource

win10v2004-20260513-en

windows10-2004-x64

32 signatures

900 seconds

defense_evasion discovery execution persistence privilege_escalation spyware stealer trojan

Behavioral task

behavioral2

Sample

bloxflareV8/auth-spoof.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral3

Sample

bloxflareV8/background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral4

Sample

bloxflareV8/background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral5

Sample

bloxflareV8/bridge.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral6

Sample

bloxflareV8/bridge.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral7

Sample

bloxflareV8/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

bloxflareV8/content.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral9

Sample

bloxflareV8/lib/lil-gui.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral10

Sample

bloxflareV8/lib/lil-gui.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral11

Sample

bloxflareV8/relay.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral12

Sample

bloxflareV8/relay.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral13

Sample

bloxflareV8/rolimons-spoof.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral14

Sample

bloxflareV8/rolimons-spoof.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
bloxflareV8/bridge.js
Size 4KB
Sample260905-b4ebrs1xft
SHA256 2c9784db3aa2c98c998ffc67351099c845ce1ceed319102331b58b380af96384
MD5 6d2afe4846ab959730a48d51353a8acf
SHA1 7a53239958e85543fdb41358012986d75ff916f6
SHA512 5d1f5125c5c3f2de7647d2a96a1ab15e4c132186ebd70cb1009f28a58c484a1560150de6311f7e6f2ecff7a3122ffe4bb85980988dffc3f012798348f21f1bc1
SSDEEP 96:/ldjCdA3ZQ32qbxmCdwIwng4TrFwrk2KTv2980:XRK3zXwZ/0
TLSH
T131A10388AEF32125E273EADEAB47841A350F95076229D608FA4C43356FD035499D2BAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\bloxflareV8\bridge.js
1⤵
PID:1272

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1368

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy