Categories: Ransom

Generic.Ransom.MBRLock.F2B5BE13 information

The Generic.Ransom.MBRLock.F2B5BE13 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Ransom.MBRLock.F2B5BE13 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Adds a new user to the system
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Uses Windows utilities for basic functionality
CAPE detected the XiaoBa malware family
Adds a new user to the Administrators group
Overwrites local Administrator password
Uses suspicious command line tools or Windows utilities

How to determine Generic.Ransom.MBRLock.F2B5BE13?


File Info:
name: 58DFA448E34466B4FD13.mlwpath: /opt/CAPEv2/storage/binaries/8256494bdbe1cc9502c5c39e91cd709535b6b14f9d3d4d2580c5ac753832fd0dcrc32: 0C348345md5: 58dfa448e34466b4fd13f15aec268ab4sha1: 31623beaa309cd59ca3ada8ff2f562be44c1f2fdsha256: 8256494bdbe1cc9502c5c39e91cd709535b6b14f9d3d4d2580c5ac753832fd0dsha512: f5ca9dae40e33e2812004379cc4e5a4b21fd6e693fc02671e82f0c9c271e8e7f512f3788717fa13f22935d12cfa8cb2f02b3cd2fd056f968a3016b4135ef1a1essdeep: 12288:9l/Vdz2I37w/+oZbjT3KPrTjHgTY1L5ftfsUGkpuaV+Vx:9XdZLwGoZT36PDCZkpuaVuxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T165257B82B68288B2D53317F04076EB369622AE455B35DAC353F8FC2AFDB31815F27195sha3_384: aa8fad6cf135dd1f4402ee9c4a98c51df913018173c264fa95f279447dee4ae5f632a27b0855ef27b85ef52aa857b76cep_bytes: 558bec6aff6808754b0068d4ce470064timestamp: 2022-10-03 11:18:40
Version Info:
0: [No Data]

Generic.Ransom.MBRLock.F2B5BE13 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Ransom.MBRLock.F2B5BE13
FireEye	Generic.mg.58dfa448e34466b4
McAfee	Artemis!58DFA448E344
Cylance	Unsafe
VIPRE	Generic.Ransom.MBRLock.F2B5BE13
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.8e3446
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/LockScreen.BHZ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.KillMBR.gen
BitDefender	Generic.Ransom.MBRLock.F2B5BE13
Avast	Win32:Trojan-gen
Tencent	Trojan.Win32.Foreign.16000100
Ad-Aware	Generic.Ransom.MBRLock.F2B5BE13
Emsisoft	Generic.Ransom.MBRLock.F2B5BE13 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
TrendMicro	Ransom.Win32.MBRLOCKER.SM
McAfee-GW-Edition	BehavesLike.Win32.Generic.dh
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	TR/Ransom.fptng
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Ransom:Win32/Genasom.ID
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.11UD6H7
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.34698.8qW@aqmZOKhb
ALYac	Generic.Ransom.MBRLock.F2B5BE13
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Downloader
Malwarebytes	Trojan.MalPack.FlyStudio
TrendMicro-HouseCall	Ransom.Win32.MBRLOCKER.SM
Rising	Ransom.MBRLock!1.B6DC (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/MBRlock.AQ!tr.ransom
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (W)