Extracted

• • Target

    f631acc686776ff8b89e85780f7c31591522480d764f02bd60520bcf4a42a117

  • Size

    3.4MB

  • MD5

    3a8821701c93b73f10617455ae5424e2

  • SHA1

    7417843c2a69b73f4c5bfcac6caa173cb9df6af7

  • SHA256

    f631acc686776ff8b89e85780f7c31591522480d764f02bd60520bcf4a42a117

  • SHA512

    b2ce77ab927bfba255f25f46306043e3abf6124ed110347423e9731be62dce6495045b97ef32af5721b46f05abbb500f5b39cf68ebea0d6b89f3d72d2d585a76

  • SSDEEP

    49152:eEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWO:eEjlmQbfgSgwvSnN4iVJuS0xJdzYUqX

  Score

  7^/10

  bootkitpersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2