Ire identifies another LOTUSLITE specimen

Ire has identified a new LOTUSLITE variant that shares tools and tactics with its family but shows no indicators of compromise. The project, an independent malware classification tool from Microsoft, utilized a malware sample to generate a detailed behavioral report without user intervention. The sample, a Windows background DLL, was analyzed by Ire, which produced a report on installation behaviors and persistence mechanisms, aligning with Acronis's published analysis. The version used in the project was not recognized in Acronis's indicators of compromise list, indicating new challenges in malware classification.