Overview

overview

7

Static

static

3

jitbackup_...22.exe

windows10-2004-x64

7

jitbackup_...22.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...FC.dll

windows10-2004-x64

3

$PLUGINSDI...FC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...SC.dll

windows10-2004-x64

3

$PLUGINSDI...SC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

JitBackup.exe

windows10-2004-x64

7

JitBackup.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    jitbackup_1.0.8.30_x64_2026083022.exe
  • Size 12.1MB
  • Sample260831-agy7zssdnb
  • SHA256 d0ee7b7d88fbd308afc34b4700f218e17556f77ba9b1548a32c5c5af0d4cfb36
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      jitbackup_1.0.8.30_x64_2026083022.exe
    • Size 12.1MB
    • SHA256 d0ee7b7d88fbd308afc34b4700f218e17556f77ba9b1548a32c5c5af0d4cfb36
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      $PLUGINSDIR/SimpleFC.dll
    • Size 1.1MB
    • SHA256 18d7dc7591641fd98c679cd6d3993e3337599b3399e2e94398344a6ac7efa7a2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/SimpleSC.dll
    • Size 1.1MB
    • SHA256 1620cdf739f459d1d83411f93648f29dcf947a910cc761e85ac79a69639d127d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 715a9b58de0995d1a08384c522ad9af210e2791aaf8e87a6c07bfe72ebfd2cb5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9
    • Target
      JitBackup.exe
    • Size 39.5MB
    • SHA256 eaa3ad3c6a907213c8c26ec7c6f7e576c63830ff23195a4852ffb749150c347f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral11behavioral12

MITRE ATT&CK Enterprise v16

Tasks