We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
5 June 2020, 12:44
Analysis environment:
Windows 7 Pro, build 7601, x86
MBR.exe
MD5:
DD7563F2F0FA8C9F5A3BBA7378512989
SHA1:
0896595F0FE6B94986202207600C610142D356A0
SHA256:
730DDC1C505AD858FAB4FDA13D8C3E20C4CD330863AF1B88B08AAE20C0DC6B46
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis MBR.exe (MD5: DD7563F2F0FA8C9F5A3BBA7378512989) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Uses Task Scheduler to run other applications
MBR.exe (PID: 860)
Changes the autorun value in the registry
MBR.exe (PID: 1492)
MBR.exe (PID: 860)
Low-level write access rights to disk partition
MBR.exe (PID: 860)
Loads the Task Scheduler COM API
schtasks.exe (PID: 2220)
SUSPICIOUS
Application launched itself
MBR.exe (PID: 1492)
Low-level read access rights to disk partition
MBR.exe (PID: 860)
INFO
No info indicators.
Threats
No threats detected