Blindeagle Jc46 Compiled Payload Static Artifacts

Duo Tech@duotech

•updated Jul 23, 2026•1•0•1

Detects Blind Eagle JC-46 toolkit static artifacts: leftover XLoader/FormBook builder tag and variable name in decrypted PowerShell orchestrator stages, leaked CryptoObfuscator PDB path in the Paralell.dll injector, forged NVIDIA version-resource string, and Spanish-language HVNC/browser-clone distraction overlay text in the AsyncRAT payload