NoCry Ransomware

▤ Summary

The NoCry Ransomware also creates a mutex to ensure that only a single instance of the threat is running at any given time. It uses .Cry as an extension marking the encrypted files, while the ransom note is designed to mimic the one delivered by WannaCry Ransomware visually, instead. The hackers responsible for releasing the NoCry Ransomware want to receive a ransom paid using the Bitcoin cryptocurrency. To further create a sense of panic and instill urgency into their victims, the malware displays a countdown timer that starts at 72 hours. Due to the extensive similarities between the two threats, the same decryptor also works for files affected by the NoCry Ransomware.

▦ Linked Companies

EnigmaSoft

$1M to $5M