be14698dddf38be027a4f4178b4f33d5d98e14f879064812a15e54c1eee91cb5

Submit
Reports

Overview

overview

Static

static

NoCry Rans...to.dll

windows7-x64

NoCry Rans...to.dll

windows10-2004-x64

NoCry Rans...al.pdf

windows7-x64

NoCry Rans...al.pdf

windows10-2004-x64

NoCry Rans...ta.dll

windows7-x64

NoCry Rans...ta.dll

windows10-2004-x64

NoCry Rans...on.dll

windows7-x64

NoCry Rans...on.dll

windows10-2004-x64

NoCry Rans...er.exe

windows7-x64

NoCry Rans...er.exe

windows10-2004-x64

NoCry Rans...op.dll

windows7-x64

NoCry Rans...op.dll

windows10-2004-x64

NoCry Rans...F6.dll

windows7-x64

NoCry Rans...F6.dll

windows10-2004-x64

NoCry Rans...nq.dll

windows7-x64

NoCry Rans...nq.dll

windows10-2004-x64

NoCry Rans...te.dll

windows7-x64

NoCry Rans...te.dll

windows10-2004-x64

NoCry Rans...er.dll

windows7-x64

NoCry Rans...er.dll

windows10-2004-x64

NoCry Rans...e3.dll

windows7-x64

NoCry Rans...e3.dll

windows10-2004-x64

NoCry Rans...et.dll

windows7-x64

NoCry Rans...et.dll

windows10-2004-x64

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
19-11-2024 07:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win7-20240903-en

elysiumstealer discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win10v2004-20241007-en

elysiumstealer discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win7-20241023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NoCry Ransomware Builder 2021/WebDriver.dll
Size

1.7MB
MD5

9283cfa187616d4db0e41bdab6083d88
SHA1

066b9bcbaade014d100e8077124ee6152b233615
SHA256

0ee619b1786cf5971c0f9c6ee1859497aecba93a4953cf92fea998e8eefadf3c
SHA512

e3f4e406d3fc8518c0b204046b648e23c9008067ed4f4855a023f1c7a38a4309e637f3230e39bfdfec245631b4f8678b772cf32b563ff33f59881048a107a090
SSDEEP

24576:EO0SpsS9mElcC2WJkXOs5jhOsYfrUVfZzDNOBGHHMYDz7DuKilhZ6Q4zoQS:BVHlcWk+yjhOssmlBHMYn7DuLZ6Q4zo

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NoCry Ransomware Builder 2021\WebDriver.dll",#1
1⤵
PID:1220

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads