resources.live.ledger[.]appDomain
Reported by 1 independent source · first reported by Check Point Research · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode“A Ledger-specific handler intercepts /public_resources/analytics.min.js from resources.live.ledger[.]app and substitutes a generated script that hides the existing React root and displays configured HTML in its place.”
Indicators reported together
named in the same reports- hxxps://github[.]com/hasherezade/jsc_deobfuscatorin 1 report
- e27ae65977287bdfb7b0e15fd3603f85in 1 report
- 03f4e47b9c2283c32bb8f8f042ce6e41in 1 report
- hxxps://accounts.google[.]com/o/android/auth?return_user_id=truein 1 report
- cursor[.]clickin 1 report
- console[.]infoin 1 report
- 0d1fce0cb2b9dec26a10f0822aeffb19in 1 report
- 13.6.233[.]10in 1 report
- 581e2e2265d0c1509b3799c5a9039374in 1 report
- de10c6b3dc4619f59bc9c80a0aa15e6ain 1 report
- de213ebc44c614d0…2ee00e24e7b6in 1 report
- c77b3b7a507162bf…6a3c967b8d45in 1 report
- 0b8015cbb1ffdc6efe6a306ff5b1115fin 1 report
- 4757f3d26bc7110e…9b9b24e0b668in 1 report
- b90e3aaae14e7787…4f605860d2b8in 1 report
- 1026743185dfa10e9ddc21b5a4c578d5in 1 report
- 212d21ed1c4b5bd9…1891d584dca0in 1 report
- 55ee2359b12fbce9…3d6517b44437in 1 report
- 201f28b5e62e52e269757930f941c774in 1 report
- f720d6f6baebd4ef…2341fe46f9cain 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.