ec5fd5770630ce1d758276d281b855ba8c726395be663d53f6f7fd10ea046723 | Triage™

Login
Reports

Overview

overview

8

Static

static

1

bloxflareV...oof.js

windows10-2004-x64

8

bloxflareV...oof.js

windows11-ltsc_2024-x64

8

bloxflareV...und.js

windows10-2004-x64

3

bloxflareV...und.js

windows11-ltsc_2024-x64

8

bloxflareV8/bridge.js

windows10-2004-x64

3

bloxflareV8/bridge.js

windows11-ltsc_2024-x64

3

bloxflareV...ent.js

windows10-2004-x64

3

bloxflareV...ent.js

windows11-ltsc_2024-x64

3

bloxflareV...min.js

windows10-2004-x64

3

bloxflareV...min.js

windows11-ltsc_2024-x64

8

bloxflareV8/relay.js

windows10-2004-x64

3

bloxflareV8/relay.js

windows11-ltsc_2024-x64

3

bloxflareV...oof.js

windows10-2004-x64

3

bloxflareV...oof.js

windows11-ltsc_2024-x64

8

Resubmissions

05/09/2026, 01:41

260905-b4ebrs1xft8

05/09/2026, 01:40

260905-b3nh2sdj2w8

05/09/2026, 01:21

260905-bqpkks1wds8

05/09/2026, 01:17

260905-bnpska1wav8

Analysis

max time kernel
899s
max time network
539s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/09/2026, 01:41

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

bloxflareV8/auth-spoof.js

Resource

win10v2004-20260513-en

windows10-2004-x64

32 signatures

900 seconds

defense_evasion discovery execution persistence privilege_escalation spyware stealer trojan

Behavioral task

behavioral2

Sample

bloxflareV8/auth-spoof.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral3

Sample

bloxflareV8/background.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral4

Sample

bloxflareV8/background.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral5

Sample

bloxflareV8/bridge.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral6

Sample

bloxflareV8/bridge.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral7

Sample

bloxflareV8/content.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral8

Sample

bloxflareV8/content.js

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral9

Sample

bloxflareV8/lib/lil-gui.min.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral10

Sample

bloxflareV8/lib/lil-gui.min.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Behavioral task

behavioral11

Sample

bloxflareV8/relay.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral12

Sample

bloxflareV8/relay.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Behavioral task

behavioral13

Sample

bloxflareV8/rolimons-spoof.js

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral14

Sample

bloxflareV8/rolimons-spoof.js

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

adware execution persistence ransomware spyware

Report Analysis Logs

General

Target
bloxflareV8/content.js
Size 2.3MB
Sample260905-b4ebrs1xft
SHA256 ec5fd5770630ce1d758276d281b855ba8c726395be663d53f6f7fd10ea046723
MD5 3868d663079c681c0088c48a90122e3c
SHA1 1effe195aebaa13b09ee30c0caf8bdffb7f66530
SHA512 98d8595d3158e8bd3a626dcc3a095d3ee4697c9747d4370bfb2958c0b49546036a51bd592609a8c9ac1c53e9fb7b89ba70a71ff2e1bca3531319895306f20ebd
SSDEEP 49152:twM5cAt+5G2Qn0UGaAnB3IlJ4RyvVl9M/AUpzr:2NH
TLSH
T161B5F1423F862CE163079F7F175BB1ECE9070EA9241408CBA2D0FDC9E657616EAD2971
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: JavaScript 1 TTPs
execution

JavaScript
T1059.007

Processes

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\bloxflareV8\content.js
1⤵
PID:4932

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4588

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6016

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

JavaScript

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy