0xblack.dev Malware research · ARGUS

8fe83c4ceebaf00bfa977ff415dc067c962f7159c75431a0849d4342e505573c.exe

Published 2026-08-03 06:28 UTC · ARGUS

Summary

Verdict

SUSPICIOUS confidence 65% (moderate)

SHA-256

8fe83c4ceebaf00bfa977ff415dc067c962f7159c75431a0849d4342e505573c

Packing

unknown/custom (entropy 7.71)

Signals

packed

Methodology

The sample was executed in an isolated, instrumented Windows VM (host-only networking with emulated C2 responses) while process, file-system, registry and network activity were recorded. The verdict is derived by correlating observed runtime behaviour with static indicators. No sample binary was uploaded or redistributed.

No high-confidence host or network side effects were captured in this run (payload may be environment-gated or dormant).

MITRE ATT&CK

T1027.002 Obfuscated Files or Information: Software Packing

Indicators of Compromise (defanged)

46c192138f740f6cce76d27b560b3b7c5ea1125e
50a9a1fcb001dc2e806fce909475a18c

IOCs (JSON)

{
  "sha256": "8fe83c4ceebaf00bfa977ff415dc067c962f7159c75431a0849d4342e505573c",
  "verdict": "suspicious",
  "confidence": 65,
  "signals": [
    "packed"
  ],
  "attack": [
    "T1027.002"
  ]
}