Noblis
Tags
| attack-pattern: | Data Python - T1059.006 Software - T1592.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 2ea900e6-e374-478d-8a47-5e5f931db981 |
| Fingerprint | 366541ff1070183b |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 12, 2017, 11:55 p.m. |
| Added to db | Jan. 18, 2023, 7:53 p.m. |
| Last updated | Nov. 17, 2024, 5:54 p.m. |
| Headline | Шифровальщики-вымогатели The Digest "Crypto-Ransomware" |
| Title | Noblis |
| Detected Hints/Tags/Attributes | 23/1/12 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | http://id-ransomware.blogspot.com/2017/12/noblis-ransomware.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | filecoder.ac |
|
| Details | Domain | 911 | any.run |
|
| Details | Domain | 396 | protonmail.com |
|
| Details | 1 | resolutionransomware@protonmail.com |
||
| Details | 1 | masteroracle4life@protonmail.com |
||
| Details | File | 4 | ransom.py |
|
| Details | File | 131 | tar.gz |
|
| Details | File | 1 | nobles.exe |
|
| Details | File | 3 | encrypted_files.txt |
|
| Details | File | 26 | key.txt |
|
| Details | File | 1 | c:\users\user\appdata\local\temp\_mei30402\lock.bmp |
|
| Details | Windows Registry Key | 1 | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Crypter |