JitterDropper
A Rust/MSVC dropper fingerprinted by per-API sleep-jitter budgets
Overview
We have observed a new Rust/MSVC Windows dropper under active development since at least 2026-03-18 with nine builds observed across two variant lines. Currently the name is unknown so we will dubbing it JitterDropper
.
Variant I embeds the payload in .rdata
and runs a multi-pass decryption algorithm producing...