Extracted

• • Target

    75f3cc169020d986ca557134fc35d613831a62f31ea6042decf0229dc2d0a22b

  • Size

    3.4MB

  • MD5

    0cef5157cd3ba2ce9d78191f00207418

  • SHA1

    1c767132075e6c0ea02decba489d2088750d7ad3

  • SHA256

    75f3cc169020d986ca557134fc35d613831a62f31ea6042decf0229dc2d0a22b

  • SHA512

    ef3f487f458bb40c62f7db393ae1c9ad8c26e596c13911c6d25920db04b3979f4c0b88d2ff0b50adb01548d46c6197d8e11737c8927d77c96075382ed9862aa6

  • SSDEEP

    49152:gEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWA:gEjlmQbfgSgwvSnN4iVJuS0xJdzYUqJ

  Score

  7^/10

  bootkitpersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2