From 4412236ae8d436c7ae4415f9cfe6ef533f7f0927 Mon Sep 17 00:00:00 2001 From: nubbsterr Date: Thu, 16 Jul 2026 10:14:41 -0400 Subject: [PATCH] Added 'JitterDropper: Sleeping Assemblies' writeup --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 88075d8..dd8a616 100644 --- a/README.md +++ b/README.md @@ -455,7 +455,6 @@ An alleged prototype of the source code for _FunkSec_ ransomware is available he ### Writeups - [2026-05-02 - 0xnubb - A Rusty Mousetrap: Attributing and Analyzing JLORAT](https://0xnubb.com/blogs/jlorat.html) - - [Report Link](https://codeberg.org/nubbie/research/src/branch/main/Writeups/Malware/JLORAT.pdf) - [2023-04-24 - Kaspersky - Tomiris called, they want their Turla malware back > Tomiris's polyglot toolset > JLORAT](https://securelist.com/tomiris-called-they-want-their-turla-malware-back/109552/#jlorat) ### Malpedia @@ -473,6 +472,7 @@ An alleged prototype of the source code for _FunkSec_ ransomware is available he ### Writeups +- [2026-06-02 - 0xnubb - JitterDropper: Sleeping Assemblies](https://0xnubb.com/blogs/jitterdropper.html) - [2026-04-13 - OALabs Research - JitterDropper: A Rust/MSVC dropper fingerprinted by per-API sleep-jitter budgets](https://research.openanalysis.net/jitterdropper/dropper/rust/srdi/donut/pixeldrain/2026/04/13/jitterdropper.html) ### Samples