Extracted

• • Target

    a4fde6214a155dbba9ebc555eec8b7218c7e1637d2fe532843238bb6a69bc041

  • Size

    3.8MB

  • MD5

    32a65707a2aca0e50ca3669bf3e839be

  • SHA1

    9205b864cd3f7a2afc1b679f08ac4aac7aa11a09

  • SHA256

    a4fde6214a155dbba9ebc555eec8b7218c7e1637d2fe532843238bb6a69bc041

  • SHA512

    a41db4d042ad1f9c24047649fa28bb844721d460e6092da9ccc8e65a63d7a539917508a659362a393cb17713b5b626ea28805f63c796c2a48ffe2e2159b9aad4

  • SSDEEP

    98304:WEjlmQbfgSgwvSnN4iVJui0xdRoM5XBHsdqy:WEjgQPXqOvWdqy

  Score

  7^/10

  bootkitpersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2