Overview
overview
7Static
static
7jsdata/JSHJ.dll
windows10-2004-x64
3jsdata/JSHJ.dll
windows11-ltsc_2024-x64
3jsdata/WinIo.dll
windows10-2004-x64
3jsdata/WinIo.dll
windows11-ltsc_2024-x64
3jsdata/WinIo.sys
windows10-2004-x64
3jsdata/WinIo.sys
windows11-ltsc_2024-x64
3jsdata/fx.exe
windows10-2004-x64
3jsdata/fx.exe
windows11-ltsc_2024-x64
3jsdata/js.exe
windows10-2004-x64
6jsdata/js.exe
windows11-ltsc_2024-x64
6jsdata/jsy.exe
windows10-2004-x64
3jsdata/jsy.exe
windows11-ltsc_2024-x64
3jsq.exe
windows10-2004-x64
3jsq.exe
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
135s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/09/2026, 18:43
Behavioral task
behavioral1
Sample
jsdata/JSHJ.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
jsdata/JSHJ.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
jsdata/WinIo.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
jsdata/WinIo.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
jsdata/WinIo.sys
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
jsdata/WinIo.sys
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
jsdata/fx.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
jsdata/fx.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
jsdata/js.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
jsdata/js.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
jsdata/jsy.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
jsdata/jsy.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
jsq.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
jsq.exe
Resource
win11ltsc2024-20260911-en
General
- Target jsdata/jsy.exe
- Size 193KB
- Sample260925-xda3bagh73
- SHA256 b8919c6e659e3b3a71f245ccbcce00497f00274d41ff854a3201a797e1f151b0
- MD5 34bebf7fa949ac69be6d03db71a355a6
- SHA1 9020bb95c09e8ce387c3b8cee36609a08c4b0bae
- SHA512 ad97249ba437afd9eb248b88ec36216c0f9ef77bf6ce784e1c2255b7d68f5cfabf66d356efd77efce4a63527a5ef21824c04c2f1473a2149f51a0454607babe5
- SSDEEP 6144:iXFsgXoxwszyukNt1SINWNHuU4CEMyJi5NF:GFy7yukNtsiUIMyo
- TLSH T1171412277B59AB98C08594BF4B851950B3BCC8A326C5C3072CB4133F2C972A9DF5EB95
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname jsy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain jsy.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language jsy.exe