be14698dddf38be027a4f4178b4f33d5d98e14f879064812a15e54c1eee91cb5

Submit
Reports

Overview

overview

Static

static

NoCry Rans...to.dll

windows7-x64

NoCry Rans...to.dll

windows10-2004-x64

NoCry Rans...al.pdf

windows7-x64

NoCry Rans...al.pdf

windows10-2004-x64

NoCry Rans...ta.dll

windows7-x64

NoCry Rans...ta.dll

windows10-2004-x64

NoCry Rans...on.dll

windows7-x64

NoCry Rans...on.dll

windows10-2004-x64

NoCry Rans...er.exe

windows7-x64

NoCry Rans...er.exe

windows10-2004-x64

NoCry Rans...op.dll

windows7-x64

NoCry Rans...op.dll

windows10-2004-x64

NoCry Rans...F6.dll

windows7-x64

NoCry Rans...F6.dll

windows10-2004-x64

NoCry Rans...nq.dll

windows7-x64

NoCry Rans...nq.dll

windows10-2004-x64

NoCry Rans...te.dll

windows7-x64

NoCry Rans...te.dll

windows10-2004-x64

NoCry Rans...er.dll

windows7-x64

NoCry Rans...er.dll

windows10-2004-x64

NoCry Rans...e3.dll

windows7-x64

NoCry Rans...e3.dll

windows10-2004-x64

NoCry Rans...et.dll

windows7-x64

NoCry Rans...et.dll

windows10-2004-x64

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19-11-2024 07:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win7-20240903-en

elysiumstealer discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win10v2004-20241007-en

elysiumstealer discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win7-20241023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NoCry Ransomware Builder 2021/xNet.dll
Size

110KB
MD5

1948c692245b3986ab96090cc50e6037
SHA1

7c807599c885109c3108e491af19c499f0b3c378
SHA256

495c1a592a0046400d81d961394e315e06363d88051523094b877fcb495fcf7a
SHA512

1d6ade2fa2d8321f189064d53141311cb94f9ad0648a3532f0df8e5876e38f56bcec106c70645f4b560bcb7fbc9e2b819edbe88bdec8fa9bfe6f407005daa4ee
SSDEEP

3072:6qCUxh+3H0MznY3wihz0YEcTqnV+xnEd8:6qCUxhfMSTqnV+xnEd

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NoCry Ransomware Builder 2021\xNet.dll",#1
1⤵
PID:1260

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads