General
- Target NTL1te.Business.2025.8.10552.x64.rar
- Size 20.7MB
- Sample260708-mx8sksev3t
- SHA256 4be853b322f8a351abe8e24720f68201b7e39200f3b4d3eeecfb86bcc6e32356
- MD5 b3bc41f1c82b488a056fd3c62e09fc62
- SHA1 d645665b4a0f5da39c5add0bebae5b3a3cbba02e
- SHA512 36a3c68692f1a346cbd507637d57d4479d095d1e10f686e5404c92672187bec91825f6108c2bf13e4b74843192802d8444fe04c806e87d025e23f13c49645cb9
- SSDEEP 393216:efdKdaP8VKSjO7KFeEveCLqFVBo7oVm8TqZaFnH:UuMmM7KYEWCLGm7oVmeqZa9H
- TLSH T1BB2733703DE4A093A7C41049726E66B8FCBBAD33671114BB46DEAF8F4EC452F705A885
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target NTLite_setup_x64.exe
- Size 21.2MB
- SHA256 184b0992631e9854657042ec9c081061f58ea3f796ddd2b5843f387256782c61
- MD5 1d6974d64491bd234c1fa9d2c1fd4b59
- SHA1 b101c9063c966389a3fe75cb8d5e85317914c8a2
- SHA512 5215b165dca92644ad3641be13f48c4a5d6e75d24cde958f558542774dfb708a89beb556d034710fd64d9391f86ec4f4eb204915486a7aff29666f824140e5f9
- SSDEEP 393216:qZpYaYqzdjmnt8H58Pp2s0dj5EXkWJA3tmF6oC21PKDVJVPr1j4bPkyGxta:y7zdjmt+8PpDqskWJqGR1PK5zDxU1Gx8
- TLSH T1E9273323F6CF953FF12E893A05B2C616583B7A60A816486397EC785DCE391901D3F64B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger