We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
2 February 2020, 17:30
Analysis environment:
Windows 7 Pro, build 7601, x86
MBRLock_Builder.exe
MD5:
C8F5F007E75F79D7289568406B450A21
SHA1:
424232CD270B7E7D255D440D25188097B9F0E465
SHA256:
BE0830713D84EBE82E0FD2A9380D4E4FBA59B547691A14069EA024C8562396D4
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis MBRLock_Builder.exe (MD5: C8F5F007E75F79D7289568406B450A21) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Application was dropped or rewritten from another process
mbr-locker.exe (PID: 3220)
mbr-locker.exe (PID: 3376)
sys3.exe (PID: 3724)
Low-level write access rights to disk partition
mbr-locker.exe (PID: 3376)
SUSPICIOUS
Low-level read access rights to disk partition
mbr-locker.exe (PID: 3376)
sys3.exe (PID: 3724)
Executable content was dropped or overwritten
mbr-locker.exe (PID: 3376)
MBRLock_Builder.exe (PID: 1720)
Application launched itself
mbr-locker.exe (PID: 3220)
INFO
Manual execution by user
mbr-locker.exe (PID: 3220)
Threats
No threats detected