Extracted

• • Target

    1305a5ddcebf91581000e85206d835d35e24c060e49cd62c0b58c41841c9dfae

  • Size

    3.8MB

  • MD5

    16a9e8d9be5607e6bc482db4db72d661

  • SHA1

    6c6d687ed95d0d02e627d3b86b9b1c19dc50706b

  • SHA256

    1305a5ddcebf91581000e85206d835d35e24c060e49cd62c0b58c41841c9dfae

  • SHA512

    e63f2674f65526a6e20ea54ea097430f51b98074d82e31d72247b2bc78c761aa35f75f17884fee7a7861ef9ed3fc9a3d175f50368e7871f268c459f6f7701d7f

  • SSDEEP

    98304:qEjlmQbfgSgwvSnN4iVJu+0xGZ6twFquI3rFqh:qEjgQPXqdEtwYf3rFqh

  Score

  7^/10

  bootkitpersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2