Analysis
- user interaction
yes - max time kernel
20s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 01:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
JSGME.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
JSGME.exe
Resource
win11ltsc2024-20260617-en
2 signatures
150 seconds
General
- Target JSGME.exe
- Size 1.1MB
- Sample260623-b4qd2aas4w
- SHA256 eaeaf23efd206d93e6eb3693df51d0dfdd30e47c17d3763d36d79d96c2fdef2f
- MD5 951f2ed3f12a265d98fbf5fd0d365e62
- SHA1 e6d21b57a36b677dcc0d6d5f5f1b83ebbe45bab2
- SHA512 f53a0e50e4a6873bc551092d3a7ab25610718886998ca020a97da54544ee6407fa6f6b432f4621b799b31a64e5d4b4c9bd3ae9624364153b1fdc25c585375e6a
- SSDEEP 24576:70zO4otLCWKqzDvk6BuRrDBYStYLjV63OSe:7LlMFKScjVgM
- TLSH T115453B12B39124BFC41707354E2FC6646D37BE502A9E9A5B6FF4AD0C1FB92412C3E686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JSGME.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3356 JSGME.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\JSGME.ini
- Size 97B
- SHA256 29efc00d904cea58944c35ed59dfaac90253f6ca14797053bcc79215d9b29e26
- MD5 06060e39513416a4d3f80f86407744c2
- SHA1 2964b33507e5f7e4f2b4e306a269906a80181002
- SHA512 3a2802510ac151835868d4c33fcafc52076964e80f02a84ae993540724f776bd408bd9fcc3da5739671bf30f8ad77e50222dbc3ee18e09ca7d832a3d72de6b85
- TLSH T119B0121083C78DC8994456D70915A2FC503204DC2BCFA710471060882898C0B6589201
- MD5 SHA1 SHA512 TLSH