We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
9 September 2018, 09:08
Analysis environment:
Windows 7 Pro, build 7601, x86
MBRLock_Builder.rar
MD5:
6D04F52F7AB0B40345BEA5B4DFD511BF
SHA1:
8D75DB604FFD4EDB212E73DC164D6B4E0D802C14
SHA256:
37E7EFB96095D453C0699392057E44FDF0AF12A8D1697D5DB0B9200018121BC4
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis MBRLock_Builder.rar (MD5: 6D04F52F7AB0B40345BEA5B4DFD511BF) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Application was dropped or rewritten from another process
MBRLock_Builder.exe (PID: 2372)
mbr-locker.exe (PID: 3492)
mbr-locker.exe (PID: 3436)
sys3.exe (PID: 3652)
Low-level write access rights to disk partition
mbr-locker.exe (PID: 3436)
SUSPICIOUS
Executable content was dropped or overwritten
WinRAR.exe (PID: 1228)
MBRLock_Builder.exe (PID: 2372)
mbr-locker.exe (PID: 3436)
Application launched itself
mbr-locker.exe (PID: 3492)
Low-level read access rights to disk partition
mbr-locker.exe (PID: 3436)
sys3.exe (PID: 3652)
INFO
No info indicators.
Threats
No threats detected