Extracted

• • Target

    e469061943d13c2bfcb26d75f9a4892eb1927f7e1577ed6d0deb4020bc6ca7d8

  • Size

    3.4MB

  • MD5

    407999905e7d9f28141444b4f636fcb4

  • SHA1

    bad7b659b06135efcfe8722df467bf0fdee2d35c

  • SHA256

    e469061943d13c2bfcb26d75f9a4892eb1927f7e1577ed6d0deb4020bc6ca7d8

  • SHA512

    ea0e84763804309d48b90a06ceec3d89bdfa8c4a699a67f5394443145af789a3888d52016c1647792f1f0820e175dc39ed6f925cd326a6f8156a16d1ff717f47

  • SSDEEP

    49152:PmCeeG9ycjX5R1hjNpBey7x/puaHX6EWz3/DhDvgR5n3kPMWaQUnPc3TEOGYPwGa:PmXe6ygXLTjUy7nuaHr3dWa01aoIqWp

  Score

  7^/10

  bootkitpersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2