be14698dddf38be027a4f4178b4f33d5d98e14f879064812a15e54c1eee91cb5

Submit
Reports

Overview

overview

Static

static

NoCry Rans...to.dll

windows7-x64

NoCry Rans...to.dll

windows10-2004-x64

NoCry Rans...al.pdf

windows7-x64

NoCry Rans...al.pdf

windows10-2004-x64

NoCry Rans...ta.dll

windows7-x64

NoCry Rans...ta.dll

windows10-2004-x64

NoCry Rans...on.dll

windows7-x64

NoCry Rans...on.dll

windows10-2004-x64

NoCry Rans...er.exe

windows7-x64

NoCry Rans...er.exe

windows10-2004-x64

NoCry Rans...op.dll

windows7-x64

NoCry Rans...op.dll

windows10-2004-x64

NoCry Rans...F6.dll

windows7-x64

NoCry Rans...F6.dll

windows10-2004-x64

NoCry Rans...nq.dll

windows7-x64

NoCry Rans...nq.dll

windows10-2004-x64

NoCry Rans...te.dll

windows7-x64

NoCry Rans...te.dll

windows10-2004-x64

NoCry Rans...er.dll

windows7-x64

NoCry Rans...er.dll

windows10-2004-x64

NoCry Rans...e3.dll

windows7-x64

NoCry Rans...e3.dll

windows10-2004-x64

NoCry Rans...et.dll

windows7-x64

NoCry Rans...et.dll

windows10-2004-x64

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2024 07:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

pdf link

2 signatures

Behavioral task

behavioral1

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

NoCry Ransomware Builder 2021/BouncyCastle.Crypto.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win7-20241010-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

NoCry Ransomware Builder 2021/Manual.pdf

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral5

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

NoCry Ransomware Builder 2021/MySql.Data.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win7-20240903-en

elysiumstealer discovery spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral10

Sample

NoCry Ransomware Builder 2021/NoCry Ransomware Builder.exe

Resource

win10v2004-20241007-en

elysiumstealer discovery spyware stealer

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral11

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win7-20241010-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

NoCry Ransomware Builder 2021/SQLite.Interop.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.EF6.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win7-20240729-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.Linq.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

NoCry Ransomware Builder 2021/System.Data.SQLite.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

NoCry Ransomware Builder 2021/WebDriver.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win7-20241023-en

discovery

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

NoCry Ransomware Builder 2021/sqlite3.dll

Resource

win10v2004-20241007-en

discovery

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

NoCry Ransomware Builder 2021/xNet.dll

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

NoCry Ransomware Builder 2021/Newtonsoft.Json.dll
Size

647KB
MD5

5afda7c7d4f7085e744c2e7599279db3
SHA1

3a833eb7c6be203f16799d7b7ccd8b8c9d439261
SHA256

f58c374ffcaae4e36d740d90fbf7fe70d0abb7328cd9af3a0a7b70803e994ba4
SHA512

7cbbbef742f56af80f1012d7da86fe5375ac05813045756fb45d0691c36ef13c069361457500ba4200157d5ee7922fd118bf4c0635e5192e3f8c6183fd580944
SSDEEP

6144:3o4V9ynqKoxhi0gAsfLBhJJzhGIVrdhoHuLFGAJmKApt5psaLGBFahKGRd67XLEm:LyncxQRhJJzhoqgH5sB4dxHG

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\NoCry Ransomware Builder 2021\Newtonsoft.Json.dll",#1
1⤵
PID:2112

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads