Analysis
- user interaction
yes - max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 04:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Jitter.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Jitter.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
General
- Target Jitter.exe
- Size 12.2MB
- Sample260628-evy7csfs2n
- SHA256 451544c00916dbbb817e7f3f5e0ffb99181a70bbf561ea524ca4e066e31624e8
- MD5 b720233189fd6dad1d4c95718451dea5
- SHA1 62e8e5f8f7972f8c5fc137fce7abe529f27cdb70
- SHA512 c1068ab561805fee28fbb96d9e7652a121acc7cb7cc9a1c29d6c8d775a75e2842b88942ce4c76c638d3abfb1442fbd10c3398c03ff93d8788468c7cf027824b9
- SSDEEP 98304:KngetWBt/OHB0XTCmHW540OcYISCY6OkgFvfkHU09mlP:H/OHBSTCmHhiYIhY6N000
- TLSH T153D68D19B7A680E6D45A8134CD9BD74AE772BC044B3187EB32D173AE6E337D02E76610
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2996 Jitter.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Jitter.exe"C:\Users\Admin\AppData\Local\Temp\Jitter.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:2996
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2000