https://ayberkcataloluk.dev/tags/reverse-engineering/Recent content in Reverse-Engineering on Ayberk Çataloluk | 0xAyb3rKHugoen-EnAll Rights ReservedThu, 01 Oct 2026 00:00:00 +0000https://ayberkcataloluk.dev/posts/blosscraft-electron-stealer/Thu, 01 Oct 2026 00:00:00 +0000https://ayberkcataloluk.dev/posts/blosscraft-electron-stealer/<blockquote> <p><strong>Disclaimer:</strong> This research is for malware analysis, reverse engineering and educational purposes only. All samples were analyzed inside an isolated lab environment.</p> </blockquote> <h2 id="tldr">TL;DR</h2> <p><strong>BlossCraft</strong> is a fake game / launcher application that spreads by impersonating popular indie games, game cheats, beta builds or patch files. It looks like a single <code>.exe</code>, but at runtime it unpacks a full <strong>Electron</strong> stack (Chromium, V8, Node.js) into temporary directories and runs a JavaScript-based <strong>information stealer</strong> from inside an <code>app.asar</code> archive.</p>