THREAT OPS › Threat News › Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
<p class="wp-block-paragraph"><strong>Research by:</strong> <a href="https://x.com/hasherezade">hasherezade</a></p>
<h1 class="wp-block-heading"><strong>Key Points</strong></h1>
<ul class="wp-block-list"> <li>Since early 2025, Check Point Research has been tracking JSCeal, a sophisticated cryptocurrency-focused stealer with broader credential-theft, surveillance, and traffic-interceptio
MITRE ATT&CK techniques
Indicators of compromise
- b73c3d732bb6bff8b9088cc0dcbadb35eea0802056324f1b6295cb9277c62755sha256
- de213ebc44c614d0b2324787e267183dbbbbb19e1ad866435a322ee00e24e7b6sha256
- c77b3b7a507162bfc03cfeb8ef18d5ee7017e8fcbd6d7e005f986a3c967b8d45sha256
- 4757f3d26bc7110e9c7f4da8050afc2ed661cd92aec9cf7d301d9b9b24e0b668sha256
- b90e3aaae14e7787e5ea4a6d4beee672049bd5eb05427f2c80b64f605860d2b8sha256
- 212d21ed1c4b5bd9b9104e04f2876842b99cd17def3591df72781891d584dca0sha256
- 55ee2359b12fbce928532d1d4efcfbbbd63340502d0107466c803d6517b44437sha256
- f720d6f6baebd4ef76df978f2678387385ee2d20a37423e7957c2341fe46f9casha256
- b3f76851a8e55a967029be7ffe4c15afd63656d6946a3df77206455e5ac28ea1sha256
- 8d389f56c5b71d194bddd5b6ce5906e7e22730034ad882606cc8ae701011bf8csha256
- 67e3d7bcdf4cfd25750425ac0682e0ed98b3cb473448696fb79bf311fcdb18cdsha256
- 2ef1ea37a941330a79a3056461e61992864e6e38c0f68cbb626ebf1f96e362c5sha256
- 99b8124c2a64d26567f19a44618144b1d6a7501a5892918f0120a496f983a0f2sha256
- 62ba626bce09db5f8750938edced3768b401084a7d6584cd6ff9d53d2517781dsha256
- dc561df51d27ed3a99cb916bf08452c901956778c26709e69705cbdf77f74816sha256
- c12ac711b4ceaa17a4e48b16fca7dabd615e4eaf35bb65fe9131ceac1687095asha256
- dd2bb7316be55446aebfa31d05e57e936eb9a18d5d9c20d60d87493100d05fe6sha256
- 484da78b0fef35711f86876f7c1c77264b8e4295d7393369379c384c05337ec5sha256
- 684aabefe516539cda48c65cb08014e6eb645b4f1e668d159fe0c18cf74eb407sha256
- 0c31453e74a3b763c7aea550b4f5f194e7656226012b243221eb93fa22da118esha256
- f6c670e65765d10a5ca0205a6ece3a3e6c7c730b0a8534c5adef4a3cbf06eb9csha256
- 5f071a36c0a79ddce92824a49fd8e9bd048b87cabb635671073402365afc342asha256
- 3d800b7dbdcb6874e29ddd2e9a1313f3d82b323e89a720c632c708098a7ca0e9sha256
- 82f8215c7e68f4a6b656b7dc6638982a6625c662ce6d6a05330eefbfde2637acsha256
- 6b498ec73d32860202b6a6ff8d21f8b5216c3903e066136f9d69ef2969955a78sha256
- 31b38e76ccaca6f38168b4fdd9cbdedd8efa7e65fe6090240e281bd3152a6febsha256
- 5fe810cb5b34c8fd07c7eca301b32ef2d3b86290828d67edaad8444db811f20bsha256
- caf8bfc90e4300b8a18c3fe3a4badbe44c106830e7432d8eea227857a790ec91sha256
- 7f3e73b2e0ebea3eaffa3685e0a162d10fde388282060d9e35b173b743676916sha256
- 1f5acba97db6d514e4b35ba0601c5269697e8ab3bb99d097db25ec7e74464594sha256
- 8c674f58b157a7319b564bb774e7aeb35135d615511838e4a553fe7ea9e94759sha256
- 9b5359dc99501ef2a4667d265e9b032f76dc28c97437a463965e2168d20e5c38sha256
- 5a024ae97242be3b1b954f845f7a87a1411c47830f81a2b54f47ec2cf741e2a0sha256
- 8abffe0d13d3b93ca3469045e4cebbee25b3631e6bba13880f04b7c8acac2536sha256
- 09f803f69bde280adbd4e584ed26a01affac9721db8c5730275d385f084b422asha256
- 95b39a0bad021f33e08df042b02d3267faee7bbc3e3080dda295c35b464dd607sha256
- 18347a39f174c97947649b3f1de55e8409ff805e808f2101e5953a956e9ee99fsha256
- 9615f60ea3cc1c65eb8fe6d77bb85fe6b455503193eab02310a873fccadd332esha256
- 1b0efeb1d988b7bc11014ccc9fdff141fc16425d659f553f6cc6946872499667sha256
- acdaba94e9975e8e03fa13bae7f0f93f165f42226aeecea3af5a4e0111bdfb7esha256