be14698dddf38be027a4f4178b4f33d5d98e14f879064812a15e54c1eee91cb5

Submit
Reports

Overview

overview

Static

static

NoCry Rans...to.dll

windows7-x64

NoCry Rans...to.dll

windows10-2004-x64

NoCry Rans...al.pdf

windows7-x64

NoCry Rans...al.pdf

windows10-2004-x64

NoCry Rans...ta.dll

windows7-x64

NoCry Rans...ta.dll

windows10-2004-x64

NoCry Rans...on.dll

windows7-x64

NoCry Rans...on.dll

windows10-2004-x64

NoCry Rans...er.exe

windows7-x64

NoCry Rans...er.exe

windows10-2004-x64

NoCry Rans...op.dll

windows7-x64

NoCry Rans...op.dll

windows10-2004-x64

NoCry Rans...F6.dll

windows7-x64

NoCry Rans...F6.dll

windows10-2004-x64

NoCry Rans...nq.dll

windows7-x64

NoCry Rans...nq.dll

windows10-2004-x64

NoCry Rans...te.dll

windows7-x64

NoCry Rans...te.dll

windows10-2004-x64

NoCry Rans...er.dll

windows7-x64

NoCry Rans...er.dll

windows10-2004-x64

NoCry Rans...e3.dll

windows7-x64

NoCry Rans...e3.dll

windows10-2004-x64

NoCry Rans...et.dll

windows7-x64

NoCry Rans...et.dll

windows10-2004-x64

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2024 07:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win7-20240903-en

elysiumstealer discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win10v2004-20241007-en

elysiumstealer discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win7-20241023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll
Size

2.1MB
MD5

3cf6bf0e0a27f3665edd6362d137e4cc
SHA1

2016dd5e17331495901299eae9a5db48ccc8956f
SHA256

1985b85bb44be6c6eaf35e02ef11e23a890e809b8ec2e53210a4ad5a85b26c70
SHA512

72182dd7ce5fdaec8a79b65626e98f38eb8e74fa6129de08d54b3bb80867019b594082e2d9e583a788d81e69c12f7c6cd993d7d74a196bab72e68400c61e244f
SSDEEP

49152:FFSSSusJVEDm2CNrmynmTF3P++3UEOkK59Vz4oukkb3KZ5:FFSSSusJeDm2WrmynmTF3m+E

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NoCry Ransomware Builder 2021\BouncyCastle.Crypto.dll",#1
1⤵
PID:736

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads