Extracted

• • Target

    f77f9164b861fd934d352eebf6cd5a1d92446d5d4f80b5b9a3445774a96d5f66

  • Size

    3.8MB

  • MD5

    239b5f9cce3103a7824bc78b9b86e211

  • SHA1

    1c2d96f1b3d3c96d30eaacd1b9be41b29f6b1fac

  • SHA256

    f77f9164b861fd934d352eebf6cd5a1d92446d5d4f80b5b9a3445774a96d5f66

  • SHA512

    5ac7ed1a2ef23fb1230e33e6e29226cdc17ac57ce01510041ec1cfe9f2bf66a527fad7d433798b7f29827a572b9f2ab17cea4aa1ee65e5fb173a9f572c56a0f9

  • SSDEEP

    98304:kEjlmQbfgSgwvSnN4iVJu+0xGZ6twFquI3rFqz:kEjgQPXqdEtwYf3rFqz

  Score

  7^/10

  bootkitdiscoverypersistence

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR)

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  behavioral1behavioral2