Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal

July 31, 2025, 11:17 a.m.

Description

A sophisticated malware campaign called JSCEAL is targeting cryptocurrency users through fake apps impersonating popular trading platforms. The attackers use malicious ads to lure victims into downloading installers that deploy a multi-stage infection chain. This includes PowerShell scripts for profiling and a final payload of compiled JavaScript (JSC) files executed via Node.js. The JSCEAL malware steals crypto-related data and credentials while employing advanced evasion techniques. The campaign has potentially reached millions of users across multiple countries, primarily targeting the cryptocurrency and financial sectors.

Date

  • Created: July 31, 2025, 9:54 a.m.
  • Published: July 31, 2025, 9:54 a.m.
  • Modified: July 31, 2025, 11:17 a.m.

Indicators

  • fb35436322e9429a498f79b9abea24ca419fafab93117582c3e97f9beab3a034
  • f97b286d61b26c98b900bb842fb7a5ccd781162bbeca8032f9c0ed81fe93fb7d
  • f8d598d28dbb8294a5c709ab23d51e29e652ab47d5a317aa31f6302481159458
  • f720d6f6baebd4ef76df978f2678387385ee2d20a37423e7957c2341fe46f9ca
  • f6c670e65765d10a5ca0205a6ece3a3e6c7c730b0a8534c5adef4a3cbf06eb9c
  • f5196deca103fba2b4de772a1415bafc616e5baa3fc6a388d0f8ee79d6f350f8
  • f1c3e6e5e7b63db19da86914726389b058a085830e0496173defe01d07849b9b
  • ed6746a55f2160c586fdc66cd2c1db69f7fd0a73e6c2f1d83dd240c43828ba58
  • e881682b59640c05cd540696955a849610260415e576f79b62383108c1aa3354
  • e7945eee02f90a9a03eb82e64fcc8ed07fd1d6d528afe0f8f948699b0497c5f0
  • e51855ae6e8e69f66c2af6d939769385f53e57445b9734b1b4811c09bfc80c97
  • e48eba9d41a2d46d963c1117604005f53afce3e7e1ac5e0a7cca3b642720e7c2
  • e14f1f80f192f1c36854474e7da7e660d06eca0a199df08c2aa6e34eb4847953
  • df93e348cc67d04318c0e439f5dbca681a3c1112924f57393cb57fc6a3d121d6
  • de213ebc44c614d0b2324787e267183dbbbbb19e1ad866435a322ee00e24e7b6
  • dd2bb7316be55446aebfa31d05e57e936eb9a18d5d9c20d60d87493100d05fe6
  • dce4294fb041c22de81d3eb4c4a178b5bdf6d9fb48b348556a51582553b3fb52
  • dc561df51d27ed3a99cb916bf08452c901956778c26709e69705cbdf77f74816
  • d8ebbee135dba28a08fd975366ddf62d3ab2ed10f2b339b867ba6800cbb9321e
  • d7dba181b322bc6f51b7e530e924ba4f60b7334a72be7c5d92fd219502bb252e
  • d7cbdc2b5c57b1f61c771be74e56aefc05ebd8faeb0d9a7b02daff6946248dbb
  • d4bd8ba1ca7643016e324cdee81f46b2c5a49508fdc9011d71abeeea672e35fa
  • d17a330bb7c929efffb8a42d6ca224f839548560603f88e432043735d392bc85
  • cd6785e9690349d95ce34d30befe8b472f304e7c1129a0824c6e7a909aab7805
  • caf8bfc90e4300b8a18c3fe3a4badbe44c106830e7432d8eea227857a790ec91
  • c9b14e41443d3d43907352f5c6cf46c53e7c9b69bf9299f8d61081e314e5ad4f
  • c7eedf31cf9e456cc9eb419edf30573f9ba03e80faccce9e86373e935f6c1b93
  • c7edcad8b139961ff93aba148b16227147b019b036cdce58522979c9b833a0bf
  • c50fe7a338e7e2edb430688c87c65f92a0efd2115a8fab2e4e9776893d28db86
  • c65fdb27d1b478a4926c2e283f8c50e827d522c13ba56da67e1fb436548a4454
  • c417e37fb42f8b7fa282992a11b1d75840b035b92e0e39891cf153cc373c0c4e
  • c3bca61beb2a6027bc5f15cf93f47749c9406bee22ee0b579a7ffb0511e6c054
  • c320e4d29fb661273e0cda16c756d962a62b2ad3d76ab13c4d1aa7dcb6168449
  • bc5d17555db59898dd15f43c8362d4f3c4013d80d64442d25d05f50caca00655
  • b90e3aaae14e7787e5ea4a6d4beee672049bd5eb05427f2c80b64f605860d2b8
  • b6e4075d371dfaa63c8a78fc4c03cfb6051202d347e6c803c6d8962b24d0b6e8
  • b1b608c7f0d943b48102237347754e593ac09715f0deda6a4a61730ece03a942
  • af8fafea328954d50c459e3da9bcb0df2fa468e4e9df1cdbf827aa99bc1a9378
  • ad558fb6438fc5d7b1a6af482646ea9d7a344221fa9f077d21f5ebdee2e223c8
  • acdaba94e9975e8e03fa13bae7f0f93f165f42226aeecea3af5a4e0111bdfb7e
  • abcbbaf9e5b34d59c9caa015a0276a457e0de2b403a5a8aff37617f141f1bb96
  • a9528e99a5b0a288855fca1d3a03975fe99ad6c5b8702a27d12e94c9a7a5367d
  • a817fba621e90c631d3ed9d062d12c34e4ef211385dede672a7eda4b5543e533
  • a696d03aeb1bde633b674bdd640a1a313cae7da711d99cfba3fd06f02d3864de
  • a5b97ec3fee224213eebd1c762e0f874481af46bfcd521cbf3baba4b1c1b6037
  • a4a0b3ab214a2d32703c1398819372aa7b491d195d1845f2d9f4f0dffc7fadf2
  • a2b4413d9280aa2662643305ef7e624719e4e8c9dd7bfed15bf2867bea08901f
  • a22d15afdeeb983d73255e274a8b62b76d267ca1cf943228d17992ceb6fd1643
  • a05f029c644f8ad912994a364aa4a6c1d64da0a894f7856bc9be251e598404f9
  • a02f1d868e1d18c8b8159d4fa915bc238d35824ac553cd835ef9702e28b1ebb7
  • 9e56b950de6ef2e38f866921e7c311f074b7edb9735257c2d0d57cd3d2067d5b
  • 9ce4d4e97956c190d384837d42274d8db33ae6073ab318f1e55f3e03da62507d
  • 9bfe57d6f74fd822c7431ee3fedb0ef36c6841634f015aa8a364006a68d45310
  • 99f9f2701ef2302072e77433a055db3ffece476f0a4aef91099ecdaefaf9bac0
  • 99b8124c2a64d26567f19a44618144b1d6a7501a5892918f0120a496f983a0f2
  • 9667c18082a1d40b9b28b8eacf92df97226be3be93090eb599ef247eb50e1176
  • 95b39a0bad021f33e08df042b02d3267faee7bbc3e3080dda295c35b464dd607
  • 8e7a3c7d6e0b0569f4d521482935d9627be10cfef10e4ba17e59b2167d258fac
  • 8d389f56c5b71d194bddd5b6ce5906e7e22730034ad882606cc8ae701011bf8c
  • 8acc2c1e5b6cb4266bfa926972b03d4b5bb4fad6f2a65adb78acf47cf0225404
  • 8abffe0d13d3b93ca3469045e4cebbee25b3631e6bba13880f04b7c8acac2536
  • 8a9b2c59cfa1f332c12b430e0e7f367ea812871bb6825e172b85bb479068010d
  • 8a7cf380772eabbe54d60dd713b0c733de67e82f4295b6638b81aaa76037e111
  • 86dbef518d357a9b1517cd9dfdcf1b611f2c1afcf4496cefa99a4f2c3dff21e4
  • 86ca0cac017def21fcf74ecae8a00aa8830d825cad4f694d89a5af9954ce0234
  • 869ab661ae67d16d91da2e9edd9a4db7fb5a342043336e62ace5ff54738c8926
  • 86610f1a2c87b80c898ec485681193f0788c017f2d0f73fad26b259655c6a8a5
  • 84db0663b6aa8df2ac04470288fd5528f5537fb89d78a2e01cabdce371a686e8
  • 84195ae96768bc312b7494a8ba0493a772042bed068bc019c8d3dd9daf39bbf6
  • 84174151afe82a85b035f66f99e6a47aa0f7ccdc32414371a434551a6ba9d216
  • 833841da3f61be8ec8eb6c660f592772fa6085563a4ce9bc8ea33dbc646cef24
  • 825ece5c2dc6fb79a8afdf15daa32868a3cba71e726e2171025017fed1f2d606
  • 7ec75e7bbb70ae4eae79e0951231e479d28490ba090b628f2d252041370b2da5
  • 7ee0db8bade12d9861ccf8f43334a217c587d97bc0828238a98a325aaff75f8e
  • 7e1c82cdcff73ac69fee3ba71d67353a062103f1bfae4f263d03b3b84e48d782
  • 7d2c797e363d45c74d90ad23438072c4e80ee2a1aa3aa8ea7f4d414b264d91cd
  • 7af6c284b3bd701476929e8888b13015c31def1039bef91c63ba15368d9771ba
  • 7a6beb95d6c5c790cdfe04d4634f5ebf24707f80ed75ba20c09b1b78e4f448a5
  • 75e03884bf2f630c41ca04148cb28b7163945e146287fd1d2aafb10d3dd9b9d9
  • 74c9175036bcaa239f433a98606df3a3be60ab9246f2067f500cea4b2be09a8f
  • 7423a2a11a00a2d43adf583f9465e776a69ceafe17d5a1c756b8160b243a9210
  • 72feb1a5349d6de289ba46509ab8b85fd91179fb533b607150d977914e924136
  • 7084b80c30b30679ccbb42014f60a079f2de8e31daeaf0b7463ab305916d52b9
  • 6e885af1b4b884c264f29253b80bfa47b29af7ac0757e5148e8cb3c342cd3183
  • 6b498ec73d32860202b6a6ff8d21f8b5216c3903e066136f9d69ef2969955a78
  • 6a3cd43d6ee7744631efb49d40ed38dcd88f8801f85992c703e2a44f13291243
  • 684aabefe516539cda48c65cb08014e6eb645b4f1e668d159fe0c18cf74eb407
  • 680da0b4d9f0c553dcdacdbbf516f59fcedd3a87f24aa1b59e9858b089d14329
  • 67e3d7bcdf4cfd25750425ac0682e0ed98b3cb473448696fb79bf311fcdb18cd
  • 66171f98e42211b0aa0e8b75bf57facb7940925358f493a0c18674e87dacc1c0
  • 62f74adf117bf42d3b6a1bf661a301e29c921bd229aab384ffe3f582040a754c
  • 62ba626bce09db5f8750938edced3768b401084a7d6584cd6ff9d53d2517781d
  • 5fe810cb5b34c8fd07c7eca301b32ef2d3b86290828d67edaad8444db811f20b
  • 5f071a36c0a79ddce92824a49fd8e9bd048b87cabb635671073402365afc342a
  • 5a024ae97242be3b1b954f845f7a87a1411c47830f81a2b54f47ec2cf741e2a0
  • 58ffc7ad61b7d8038b45e1e2162b98d7e011b29fec1601068a98f6a272611b3e
  • 570408c97419092992370a1bf9b21e310b04ec3b56baa0ba0dfecccb5b1105ad
  • 54c0ef7cca1112e75bff0ebca5da91a1ca66c531e0b6a47b1e85907e21cc8623
  • 535bfac9fc9efd2d3abad5050a1c0165acedfbbd55ea9b701dbd9717cc387a9a
  • 52c0ebf80ba046488b988d32d8dc35eff170e44b29d06a0012c092f5f1ca7b50
  • 521e82117dc6d8d1a086f6094a31b3714677bdf5b8b27a40235e2d0d2ece3487
  • 4ff0bb65fb61bd59ab3fce204686a9e144989c65a1b92849bba5a144f9a23e77
  • 4fbebb8e16bb4c9221c547656fa9f18f533ed8036d7604fef889c6409daf7e54
  • 4ec7fbeedbad503e91d7d564803f608982eb091f091c24bef88f1ce5b4bddf2b
  • 4e8dcef6a5c8c44a2910d0dc0b300f4d88ee5d4c71c9e5a710564062ca1c5f9f
  • 498269312a98583200ffc3a376ef909e15f4a67096bac218c849928ad7eebc92
  • 4889dda77ff5e7871e261d74b2ed83d987d3066471937b496e3b45101d3ddb93
  • 4705b21127e818572957d71cecda5c63b4f65cc59d00e9c1c9a226b595c5afe2
  • 484da78b0fef35711f86876f7c1c77264b8e4295d7393369379c384c05337ec5
  • 43e385e3ce0f4d50b506829c3c42fcc680f1a47a495ee44aa995556ca8cde0de
  • 43d80f600ebd0c2ba4768ea0600a6952e76fdcc659e7527f95dd89ca07d0a398
  • 4297fccd1a4d3508ba166c3d32eaf6ac47a6267d2743eed2793de66d9c16a154
  • 4188868248e8f74ecd2f2868605a77f1986dbbf74d3bf741135c69931673ad38
  • 3bcc05127c22b70f84ab4d252321fb35ec77a5db23764f4888094882dc4f9554
  • 3545b3debcfc385f169c92edca55dc5c9d394580fac1482a8394af5806b996b8
  • 3228733606853dbff40f8874c88865f23b4cb0f07aebe746a77245a353c1f519
  • 2ba5fdec63b23d7578bbb5c0a07bcae7fdcbb339acfff4fb4b2edd6e48a1ba62
  • 2b647bde846907c875504a3bf9df1ad12bf3a904130dd481ee8cac2effc9aa3c
  • 27867b97cd0228c773e10c63859c39afcb24966b7b662542a31a24fbb212c754
  • 2701e53ba45d9b87fecd02e14609a87531d34b1503c2616c5fa2bb3fb45bf292
  • 257201487770ac57345a1abdc90599bc78f5a9ab95b4ca0b9ff2cb699ddccf7d
  • 2339d4df537806bad1a503831c90f45174fe3700afb214d85a4e3a2e0007b0c8
  • 22c9540bf90fa46e35ebe978406214560f8e71c4e652bfd079c8e6ee2347bae7
  • 209639849f74bf2736ede28b0a90a8f5799a14fb6a3fc79833ccc2144aa49b2d
  • 1fb0b09c0a88665a3f2176555f58aa5ca5944d216f95143584f070468e184723
  • 1f874d70bafdad4f62ce21e416466513d9e681c70f87a4ad3acc7a9851cdcbf3
  • 1e17595baf62c026c6a44c2b8d6ea8de501c2d8eda3adc6f2812ec01794e8a81
  • 1d9945ac1a06f5ecef58d75452c898f39c6fa71f91274baf70404104bea63f36
  • 1c03556d7d881f037714ec5186da327467d3cd16c1ce9dfb16dd7fea736f2001
  • 1b757be18092f64e50127d80dff35d0da3d4e2d99ed199a6df134a86461a727f
  • 1835390a86dc9da1ed4da909f1ba7a9c21448bd2d19858491ab9aaefdcf50fcc
  • 18347a39f174c97947649b3f1de55e8409ff805e808f2101e5953a956e9ee99f
  • 1773359f8c24fdbe6aa5ae94ea3988164c62a5ff5f1f28ca4ea0b04aab8f5a69
  • 15d80a960ca81969063e1ef6181bc91fc2a1198a3065eb3eac4cafff49927ab5
  • 146173888f2910ab7e5a8bfb096af6e2b245f049f5b89f53052d509dee2422e5
  • 111fc7d7dd1f4ba3a87927b1754a9b67d2c60d58feb1cd6cc28d6c0b4057184f
  • 0f6357f4dbc36dcf73b4e83f9af5a796e81742a1aab11c2c2ecdc0ea2691df41
  • 0e5343b83417b68521711acfa06375ebc8340750cf1a33d6709b2dd64704bd10
  • 0c31453e74a3b763c7aea550b4f5f194e7656226012b243221eb93fa22da118e
  • 0a5e5d64c5af3c26e35af64f8ba5b5f022a53a6a15b46dfe24c9cb0e2b06cbb1
  • 0a3cb06b5ac5ad76105605ac88936966fe5f804488e6bd1882de1f27e30b6246
  • 09f803f69bde280adbd4e584ed26a01affac9721db8c5730275d385f084b422a
  • 05db78bff1a48a674e70368b96a550a5f9f93271eb261ab63b36ee37e0e8b9f8
  • 05bb24fc76e97ae16d5d34d060cbcb015d8d89fee5fb2d2627600c86c7b9df47
  • 058ae4136e241f116d8c5b1a1cad15b53090797154539faa35706568fbd85d9b
  • 044e8525eff98c030632fb52cd145c404f7f1fe22c99f74afd3f9b14e38f2375
  • 040aca668b27bb12a083e4fd81e2e8ee5e48b5a87ecfac12196a855181e1fac6
  • 03f3b378e78df66df0ffdaa37e286c71b8ae0da7893112125c3fee29b76b1db9
  • 0265572bc65a4b9c9df8ce5396b3eb0f5050e677c83cc33427f168111cadd270
  • 01c3b49ff55dfbe738b6c9370681b1985abd34641a75803fea1468e102b726c9
  • 0207f65982931abbd6984c61dc0ae183de6ecd3a2142899bc6df37a1b21c591e
  • 012c29675f4680830380c13ab008d8275e7b767d99cf1bde6f07048f8af60753
  • 008ebf99c5d6ba123da31e70d342615b902b62d948e7e391fa14c12401367531
  • www.twex.exchange
  • www.topshare.com.au
  • www.coinhub.mn
  • www.bitazza.com
  • https://www.twex.exchange/
  • https://www.topshare.com.au/
  • https://www.tokenmetrics.com/
  • https://www.mercadobitcoin.com.br/
  • https://www.coinhub.mn/
  • https://www.solflare.com/
  • https://www.bitkub.com/
  • https://www.bitazza.com/
  • https://www.bee.com/
  • https://wowbit.com/
  • https://vindax.com/
  • https://remitano.com/
  • https://lutianwl.com
  • https://kfc.global
  • https://gmgn.ai/
  • https://bitcoinvn.io/
  • https://bithumbcorp.com/en/
  • https://app.daomaker.com/
  • https://app.akka.finance
  • https://pdax.ph/
  • xhab.grpc-test.me
  • r2.ohyoulookstupid.win
  • llr.experimental-tech.com
  • windows-downloads-app.com
  • twisted.mom
  • timing-kings.com
  • taylor-convert.com
  • schilllr.icu
  • supercharming.com
  • supernegro.mom
  • printscreen.lol
  • pffffer.icu
  • pc-downloads.com
  • pc-downloads-desktop.com
  • pc-downloads-app.com
  • pc-download-desktops.com
  • pc-download-desktop.com
  • pc-download-app.com
  • pc-desktops-apps.com
  • pc-apps-downloads.com
  • pc-apps-download.com
  • pc-app.com
  • pc-app-downloads.com
  • pc-app-download.com
  • pc-app-desktops.com
  • paid-rewards.lol
  • lutianwl.com
  • luiowitz.cfd
  • lovely-race.com
  • local-mailer.com
  • grpc-test.me
  • foo-foo.bar
  • firewall-813.com
  • external-sex.com
  • downloads-windows-apps.com
  • experimental-tech.com
  • downloads-windows-app.com
  • downloads-pc-desktop.com
  • downloads-desktop.com
  • downloads-desktop-windows.com
  • downloads-apps.com
  • downloads-apps-windows.com
  • downloads-app.com
  • downloads-app-pc.com
  • download-windows-desktops.com
  • download-desktops.com
  • download-desktops-pc.com
  • download-pc-app.com
  • download-desktops-app.com
  • download-desktop.com
  • download-apps-windows.com
  • download-apps-pc.com
  • download-apps-desktop.com
  • download-app-pc.com
  • dockmilk.com
  • desktops-pc-download.com
  • desktops-downloads-app.com
  • desktops-download-pc.com
  • desktop-pc-download.com
  • desktops-download-app.com
  • desktop-downloads.com
  • desktop-app-pc.com
  • desktop-apps.com
  • desktop-app-download.com
  • csgo-play-de.com
  • bithumbcorp.com
  • bitcoinvn.io
  • apps-pc-downloads.com
  • apps-pc-download.com
  • apps-downloads-pc.com
  • apps-downloads-desktop.com
  • apps-download-desktops.com
  • apps-desktops-pc.com
  • apps-desktops-downloads.com
  • apps-desktop.com
  • apps-desktops-download.com
  • apps-desktop-downloads.com
  • apps-desktop-download.com
  • app-windows.com
  • app-pc.com
  • app-pc-windows.com
  • app-pc-downloads.com
  • app-pc-download.com
  • app-pc-desktops.com
  • app-downloads-desktops.com
  • app-desktops-pc.com
  • app-desktops-downloads.com
  • app-desktop.com
  • app-desktop-download.com
  • 87-899.help
  • 18-22-59.com

Attack Patterns

Additional Informations

  • Finance
  • runt.monster