0xblack.dev Malware research · ARGUS

7fb8b06a9ac3c0c6b475948d1b981586cea76a2fc53f57c54163352fd90f0c63.exe

Published 2026-08-03 06:28 UTC · ARGUS

Summary

Verdict

SUSPICIOUS confidence 85% (high)

SHA-256

7fb8b06a9ac3c0c6b475948d1b981586cea76a2fc53f57c54163352fd90f0c63

Signals

yara-match

Methodology

The sample was executed in an isolated, instrumented Windows VM (host-only networking with emulated C2 responses) while process, file-system, registry and network activity were recorded. The verdict is derived by correlating observed runtime behaviour with static indicators. No sample binary was uploaded or redistributed.

No high-confidence host or network side effects were captured in this run (payload may be environment-gated or dormant).

YARA matches

Downloader_APIsEmbedded_Executable

Indicators of Compromise (defanged)

b86596258e715a1e6847a2e67f4346fe15eb1712
c3f59fc053ff6ade13667c98d808b9ba

IOCs (JSON)

{
  "sha256": "7fb8b06a9ac3c0c6b475948d1b981586cea76a2fc53f57c54163352fd90f0c63",
  "verdict": "suspicious",
  "confidence": 85,
  "signals": [
    "yara-match"
  ]
}