0xblack .dev
Malware research · ARGUS
← all findings
e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a.js
Published 2026-08-03 06:28 UTC · ARGUS
Summary Verdict
SUSPICIOUS confidence 75% (moderate)
SHA-256
e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a
Signals
executable-drop
Methodology The sample was executed in an isolated, instrumented Windows VM (host-only networking with emulated C2 responses) while process, file-system, registry and network activity were recorded. The verdict is derived by correlating observed runtime behaviour with static indicators. No sample binary was uploaded or redistributed.
Dropped files (1) C:\Users\lab\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a.js MITRE ATT&CK T1105 Ingress Tool Transfer / staged payload
Indicators of Compromise (defanged) 1308b107fb3fb9cc802b02f02f10e1eb fb850ffb2a02d4152c689dba36f0e7dbc0268426 C:\Users\lab\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a.js IOCs (JSON)Copy {
"sha256": "e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a",
"verdict": "suspicious",
"confidence": 75,
"signals": [
"executable-drop"
],
"attack": [
"T1105"
],
"dropped": [
"C:\\Users\\lab\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\e962a6eece99739ab2b13ae26f07ffed79884cea267f5170029e471e0bf9579a.js"
]
}