8ade066a37f457d2951d18dbb2b6b1cbaa1e9fd150e049053484def47ce8d9c6

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 06:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_HEUR.Trojan.Script.Iframer.exe
Size 1.3MB
Sample261014-g44vbazwhy
SHA256 8ade066a37f457d2951d18dbb2b6b1cbaa1e9fd150e049053484def47ce8d9c6
MD5 bd8ef5323fb6d6e3adc868d921f2490c
SHA1 af18ed929e8fb1224a0cde2338e2cbbacb24f66f
SHA512 814cef0b8555826cb433ff5905ad9147a31fe94b526ac27ba5bac11e6449b3e23906ac47aaffbf4a26ce18c7e1724fcdb3bc09da0731f2bc8bf59c4eeb0fafc6
SSDEEP 24576:8u/PWcxXDJB4RnA1XxN8MkSPxsfrrUv79cQkKhliNMMjxEyPksKNzOmO1:8uWgOuNB5PXD9BkKuNV1dKNKmm
TLSH
T12A5522A3A3E904F2F12223361857B3609675D77C7ABB3617D3A0050771A0BF12A6E797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	jaffacakes118_HEUR.Trojan.Script.Iframer.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4080	jaffacakes118_HEUR.Trojan.Script.Iframer.exe
4080	jaffacakes118_HEUR.Trojan.Script.Iframer.exe

C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Script.Iframer.exe
"C:\Users\Admin\AppData\Local\Temp\jaffacakes118_HEUR.Trojan.Script.Iframer.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

body.gif

Path C:\hsoftweb\body.gif
Size 822B
SHA256 fb97c88f2ed6de330ae98ef5795f0eea5e78c2b99b8845752b860237cbb6485f
MD5 50ea2adb3b1fcb784ca1a06a4211123d
SHA1 2e15b63f51c263c33c2bfd658c1cba39c4f6dda5
SHA512 e60b03298758943175333cf2d7b284d771734c7d3af5656cd37efae5d19d70009e21abbce75775f7c82fa8dfdb28e72c3026198e74ac1bb7d8ed5db1c94ce189
TLSH
T1D301227762E5989CE7BB22B8381C844A3931E207C5071EE4E881F1ABAC102008BE01E2
MD5 SHA1 SHA512 TLSH

Submit Download

eliminar.asp

Path C:\hsoftweb\catalogos\agencias\eliminar.asp
Size 326B
SHA256 4ab9fe6b5bba7bdb334feb889c602005adf0a031c9890a076cbe69db6912cb73
MD5 1d3e12560dc3b06e7e46835d926a3a23
SHA1 e7cce62ff1e115a773a424ceb9b92f58335897e1
SHA512 ac8766fceda5ecc39024bbb5537965c505df4e3445f40db1e7b2e5f4f299d2c77c7a1eb99d8e6ffbea03cd6dc9832d989a98e57e3304466c995e916731c08ca1
TLSH
T17BE07DBD10165E0492A1DBB120E6F3914C93A68365C1039CF84030DBB5CB34DC1437CF
MD5 SHA1 SHA512 TLSH

Submit Download

pais.asp

Path C:\hsoftweb\catalogos\periodo\pais.asp
Size 3KB
SHA256 e6b1409b4195258dacb26385e896d6ade3d052ad6c5e7bdfbec6d1fa6fa61990
MD5 c223cc44a3d6983808375931a81894bb
SHA1 03004a190d0c4ea1adce98a29ed3c75942d9a217
SHA512 9c09eb2be733906e2a335b199d41f290a8f45039b1da7674e4812214a198e8cf72cfd0b0b64eba3a292214d7a691690661856d46b23feed6011fc97839b8407f
TLSH
T1966186C4E782DF7500A340F288369D8969E76861371A4850BE7792FF3381DA44172EED
MD5 SHA1 SHA512 TLSH

Submit Download

eliminar.asp

Path C:\hsoftweb\catalogos\promociones1\eliminar.asp
Size 563B
SHA256 1f41fe076c053636d5589438a8992235ae2fc701a9ede76c7f0a30814aca5dd3
MD5 83d6cf0f00eddc34301813cfa099ed78
SHA1 4adc003a1b2d8dcc40b8f69bf727a9eb5eefc8af
SHA512 4bd8b950c5c8b3fb255f55afccbec6a2929ce6964816ea6ee8c5afbe176ec8599de61970a29b901dacf20ad26da38beed8fc80d4790b7e9e44762caab85e530e
TLSH
T168F0E1A549B4C6DE97730440D283DC45523D55183E34A4242CE4D07E90807E97177EEE
MD5 SHA1 SHA512 TLSH

Submit Download

eliminar.asp

Path C:\hsoftweb\catalogos\racks1\eliminar.asp
Size 557B
SHA256 f431d47db56cbf42827379310bc429b8c27bcf0b1d330377d8808a4629c555ce
MD5 4b62682300d55d7546185fecd64655dc
SHA1 4ce4ed5644b55ff6afee1b3f8b3043c872aaf857
SHA512 3905abafff2be7c51d2b46da6acefcd47d8ffe4f80a73f3082b7dd2febb5bd946032b09e79df9e152ce8f0ab9464ef31066fb98e517cad2f1cd81bb2f51f1b09
TLSH
T1C2F0E1A549B4C69A96B30440D683DC05913D55183F28A4142CE0D07D9080BD96177EEE
MD5 SHA1 SHA512 TLSH

Submit Download

clientes.asp

Path C:\hsoftweb\clientes.asp
Size 402B
SHA256 c876353b541f0e8ea856b359428a93a5c5050c195d2f15490cbe90441e95c5fb
MD5 a8e8542918ec4850febcb34856402ed3
SHA1 0dc45eef4c57b692b6ad2e2b9a9cdba55ea37369
SHA512 9223bdba47574cb82f98b96212412f7a05ed2a5fa9ab9c934d355d86e160a5c4aa8b700af58ca5e294aeb3ac3b90c6f2f433abc818520cf2cde5b111c406437c
TLSH
T16AE0F1ACD70A4E71627F04EA1F3C41095454C8862BCE6713BF40C3CF530544558D8C13
MD5 SHA1 SHA512 TLSH

Submit Download

olive.png

Path C:\hsoftweb\imagenes\olive.png
Size 621B
SHA256 46d0a34b375f7d5f6c6d9922374160e4e6382ca9de469eced89bc824376604cc
MD5 627978b623b8e14ab1bc9132d904ba29
SHA1 d137a12279ca7d6f857b0a6082e607d606f8e152
SHA512 c31f443e46beaa1a4fa28a21005e0b6b8b29eb2a64f4bc5dddc1d8840799dc25b20852ff2495a71be0401a0fd8728e701d6b2a2363aae97a222925e2598ce37e
TLSH
T162F047ED3DE15D9D5225AE034F4648E65C03474BB217380DE752D84A08C5A8C36DCF1F
MD5 SHA1 SHA512 TLSH

Submit Download

star_off.gif

Path C:\hsoftweb\recepcion\recepcion\star_off.gif
Size 901B
SHA256 c415ab3512360fe63c5eba684b8014d8c8b1da59f054b4b9f80792adc5dec582
MD5 a186475e4d9736d4fff5f1f86e0812d8
SHA1 1be1184df91b5b2d24abe7a3a9aef61ea14c6995
SHA512 2e8629adb940eceae5374a24ef615cd86a24ef5a3de7f9f28fed64717e36b9e75cd3534f9326cb927dbd791923951b41a55e758195363c0581537155a8fd65f6
TLSH
T14411EBA8C8B69A32DC5D41B32A1488A5F10007E0E04F4E0623843AF9E8DDEAA0813891
MD5 SHA1 SHA512 TLSH

Submit Download

star_on.gif

Path C:\hsoftweb\recepcion\recepcion\star_on.gif
Size 908B
SHA256 e4b5b20a0bfe7afa4f3eafe832261ea16af93b5727a7074b86c9376716428493
MD5 968eb64322b19b844ea8977c35b3433a
SHA1 0ab94b42f13a7d3a9df8bfcc0913782c70f2e256
SHA512 c0340dcef93a967706973badde25c6e67db0424227d414e97c1c59cd95b3f93a33e77ff6731e15abca5aa063d99a9a3f58f0177d5f7ede500a03d07d7b778e5b
TLSH
T10F11C03E60F79D7EF6D987320360633005715C6767554D056C64618C1D2B4B5D6D6E23
MD5 SHA1 SHA512 TLSH

Submit Download

print.PNG

Path C:\hsoftweb\reportes\_vti_cnf\print.PNG
Size 154B
SHA256 6cefef7df17c4610eb36e4c3d9566794669dc145332a10ef235df2583e08e46e
MD5 1e86fd21501b32103c58f411a4c6309a
SHA1 98dc6abc65865c035ebc5b595c0175623bae835c
SHA512 37078d8a933f7447d1ace04ff989bf6769fc6bbcc738dad20156d5dfa1de62f60d0d2a2612fde2b4bf06ed49e19f90f6167a20e9545c005705aee360bc37271a
TLSH
T189C0C02443001CF01065D2A38410D1CCF374202F9073560097CB03101E060C11C03F00
MD5 SHA1 SHA512 TLSH

Submit Download

back.PNG

Path C:\hsoftweb\reportes\back.PNG
Size 2KB
SHA256 4bfd11293bfd0e62a8fba778fd13f3be4aa019b6dc3ef433d79fb80829458827
MD5 b360bb2d8a46835d90944e91da052715
SHA1 9005af1d187d1ccfcb1767b0bd50f855c99e21df
SHA512 65311699db47def9c6ee2a05f70bc3ddce5c7593210072de86c78e87dfc2a97a14668cccd9b3a83e48316729cf82841c3e88011ba61449f70fc6f97c774f15f9
TLSH
T12E513989042EC263C88A47DE998619D0B88CC05E87C6183F11B8DE846CCFB9BE8E8400
MD5 SHA1 SHA512 TLSH

Submit Download

factura44.asp

Path C:\hsoftweb\reportes\factura44.asp
Size 8KB
SHA256 76959515a049e1f9f495673cce72bd49813b68eda209a142e06c7057209b2ed0
MD5 f1773980063152f37e61cae4eadeca95
SHA1 648e6cc368e09f85c6601e352e36c23e9164b4a7
SHA512 1ee5d369680b87105934bab31cf96ed56a34ea46ddbe993457683a973be582b1fa787cfaa62016514ee4a690cb9f05f44063a8217a71c536953ac50e864859f1
SSDEEP 96:S2H3PaFCuWdddddd9WddddddRU6fuOPYG7IO5CuWdddddd9WddddddRU6ruOPYvh:S4/gvagNPeO5vaghPbOB
TLSH
T1AD02B9B5B19CF63D80E261A3D0311DEA28DFFE66A3160904D67B393B33C5A3465225ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

num.asp

Path C:\hsoftweb\reportes\num.asp
Size 4KB
SHA256 d7423ce13fc7260146cdff03c83531e12838ef9c2a7f2cd26a0777b7ab257247
MD5 fe25cd0d12aff9e349ea7b089d36fa75
SHA1 5995ede22178d6fc0d8db47a2eedeabd1cf247e6
SHA512 2b10478b4435819cca69f3df43f182dbc0070f61fc03ee95132e8ec7aa632036e940a1fc8383f1e54bf6e890379d55c30f909dd9f100eab1ae27876a953acbe0
SSDEEP 96:PXy1owU9Ta1Cpmq9yrVnN8okCLNjwJOqKnVGI9bSPAROhl8:+CD4DAOwi5SPAohC
TLSH
T17291571637882160887686A55C1D752DC590ED4B7A8FB85477CD42B26B3B43F9AF0ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

planes.asp

Path C:\hsoftweb\reportes\planes.asp
Size 23KB
SHA256 d0402ff9924988069dd8b04867a52c3419723c610f2374aa436e0e1a6e7d9cb3
MD5 c3416c0f90eccbbcfaa7fa25e5c98b2f
SHA1 dbf95ac35a340577c6f6e866b3b91508eea14a8f
SHA512 fc9ccef35b0cd3627fb12ccd2348f6f55676222883814a5ba5264baa8b99b56735aae096ee04bdff942d3ac9223b9222e1b546ee0b7ed845d83f43b647bb8169
SSDEEP 384:sZdZQjocxXQj2l6YPk917qozICZT648tdTm:odZQjBXQj/+k94oEM
TLSH
T1A6B220B7B6DC5A76A2926193D832BED220DFF831E3994421F8FF25371384E545122DAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

print.PNG

Path C:\hsoftweb\reportes\print.PNG
Size 2KB
SHA256 4be7a0ddae02ffd4503f4724e0cf595048c110d5c1bbca8c5c28ba08a5dec989
MD5 689e7eba7e3c15a3782e4ba02e4648ec
SHA1 ecf771ba5a179c3f361665ca5879c79571d5c589
SHA512 695db202330d0a7f8108ab0d576a5b3b4b1dabbda76922d834ac0fb958f1ea1f58c569ddf8bd96e9b96e75de9e25b5396a1434424d51197ae01b6ddc2e2da82b
TLSH
T1CE516BD2238E22B02B5D6EF2145CC096D45788E92D73CE8F1548EC6A65853246407AFF
MD5 SHA1 SHA512 TLSH

Submit Download

reporte.asp

Path C:\hsoftweb\reportes\reporte.asp
Size 2KB
SHA256 c94a40f03f8fa3e3b2d5d42f0556b6d70078296354441dde4ae8f6d92b276eaf
MD5 0fc98b7face5ff3a8e09b5870913a7b3
SHA1 ae1a7e4adb8ffde185d20e429f51f3a409c71593
SHA512 a670bca201bc217272fe0b84c052ec537049300354a94bbe15d0058686ea3bb8c00329e12f6b74c8ce5d915901fbd0f66e6ec819ce7525f40b823b92924013f9
TLSH
T11B4110ABF28DFC6552A761B33CB7986A50DFD837CB1981237E75807F1A0046441CB55A
MD5 SHA1 SHA512 TLSH

Submit Download

calculos.asp

Path C:\hsoftweb\reservas\reservaciones\calculos.asp
Size 2KB
SHA256 36aa81c635aa962fbb75c6c2c7ac855c6871cbb4ee56cfa25ddb9b1d6ecbba3a
MD5 7c3b1dc7bd3cc679c2d84b4486d95fb2
SHA1 516ad5cd7298822933b50507d2772e75b0b99674
SHA512 b493468bdbd8b35836bd346e13c04b167f1247bdc8ada3fef1084982d1f83b1e39572ea0cf5fbee2259ebc4727b7e753146192b612e92b3d552aa2cd767779b5
TLSH
T1AF511EAD2849D43A4131B7F9AB27DA09FB7140232343C9A4B9EC42871F7076494A7FED
MD5 SHA1 SHA512 TLSH

Submit Download

importes.asp

Path C:\hsoftweb\reservas\reservaciones\importes.asp
Size 14KB
SHA256 991d22259c93bee4946aa5eef7687304b9a68317295c848398fc4797431a343e
MD5 7142ab16d4042d24a3b0dcb374095387
SHA1 a236e615c53eb4c1775466c253de5b4c02640cfa
SHA512 473ac3adc21945c1550a2efcbe501e203924b4d119f926215bfa450d922b57e544758962c2e46080df21e540a73288d6c1e81608da05b5498d5cce3c6c02d852
SSDEEP 192:Xlnqom/PzIaQKz2WaqGlbYjiDY7/wNaKHwYA8wXc7X9Pu4X9k4QYAHbX78xayo0d:XVqNIaQ1tpYjiDY7/wNaKHbl+8xV
TLSH
T154528523F094A367A22220D394338FC7AAF7E837A7268552B5FE52771384E309163DD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

importes1.asp

Path C:\hsoftweb\reservas\reservaciones\importes1.asp
Size 13KB
SHA256 35f8b4aa732566a18b69b29d105492f64967fa90e9c69a7bc9cbab675e4480c9
MD5 c88d1bb084f948f5c83ca8e80a5f0f51
SHA1 bf4688f8e8cdef96512b85abf179a9cc7b5eea82
SHA512 7977b2b5ea5a85b557cab4bb3c8ec8e2139509c1d8396173deaa6df94826bc5c858390e030811991a8412c8200ee8df65c8913d3b8a8c54dfcfcb4a9a2a7a892
SSDEEP 192:Ylnqom/PzIaQvz2Ry4YqGlbYS0F+O9uWIaKHwYA8wXc7XePbQT4QYAHbXcZNayoO:YVqNIaQ34YtpYSg+O9uWIaKH5U1ZNr
TLSH
T127527533F4D5A227A2622093D5338EC63AF7E933B3268551BAFE51771388E209063DD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

importes_m.asp

Path C:\hsoftweb\reservas\reservaciones\importes_m.asp
Size 6KB
SHA256 1fc53fbaf447a3c3c3b045751a284f593a7f47fe27770ff1b90a3d89991c0649
MD5 42cec7162881fb90838cddcd9f3471f2
SHA1 9feebefeb1101292c0de66747e51bc7522e7493e
SHA512 2b26bdee2edf92f0ad405058e5a8109ead11ae004499ffad4e45842e38c38212277a124bfaceaceeeefed73391c78d58f431face31c71659b380e21bd7059b23
SSDEEP 96:enqom/PJQan2PvtgYA6GUSxv7USj6N3FyonTbU0gQz+6psn:enqom/PJQan2dgYA6GXN7X+JTbU0bzjG
TLSH
T1ABD11023B0E5B16BB1621093E5335EC336E7B933F7264521BABA16771384E70A063D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

importes_m1.asp

Path C:\hsoftweb\reservas\reservaciones\importes_m1.asp
Size 6KB
SHA256 d6dfc8f9aeb6dbdecee7bc30eda1d02a838ebd84fc7d21ea79c247af562b5745
MD5 6b845691ac05b850f10e5d61434bd30c
SHA1 274c25348ed3b5c2394b50dd976f6cecb285af97
SHA512 a6f67d9cfb8d3e34acb63709b4d57ee3ac6ba7a4f4dffdc85440290b9c2d43b898fbea293fcf08af0b14efc95ce0f9d3dc5e1d9c9c73a61c13fb5453005a3ee0
SSDEEP 96:Snqom/PJQFn2PUtEYA6GUSxv7USjHu383onTbU0zQz+6psn:Snqom/PJQFn2+EYA6GXN7X7+TbU0szjG
TLSH
T16FD12223B0D5B26BB5621093E5334FC335E7B933F7664521BABA16772384E70A063D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index1.asp

Path C:\hsoftweb\reservas\reservaciones\index1.asp
Size 57KB
SHA256 69f7dc354ba5dce95c17c9c5108f7d75d3d347b0a5da8e466d7f01a5c08f4e12
MD5 4d47943f0844d7efa85dd230b28b9298
SHA1 191e519d857ffab140e4765a27a3961944f621a1
SHA512 e20991f9eae655f1ec6d738a94bbbafd855e6d72bf29b56a84e4a75d33768093bf3c5b7b5c41774c630e3cf312b99dd1a8806b909617b21291a4f1683c8e973a
SSDEEP 768:z3gx3VvcJNmeKluWpKihn3qcsX9uE6Gyrsn87+ocvTV:E/vcJb14E387JcrV
TLSH
T1B643D892F69DDE36056330D3CD37A985B4AFD83027224451BEBE417B2384E8895B7DE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index2.asp

Path C:\hsoftweb\utilerias\index2.asp
Size 9B
SHA256 45ef613dfb68d435801743c5da0927d1306a6a73b9d88cbf45158280924eca8a
MD5 5ff982f034f71113d300a612c1a015f3
SHA1 a6379f781cade2874bd34d4ad0a05e6fa58ae048
SHA512 05c1b5e4ef51bf9c8cd88970fa50b28f7db91e2472488870e9dd718bc16134c83351d8539dd19a8e8a4f47bf5514f996b902f73eb904965f50317bbb3da07f6d
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads