There has been pretty strong attribution for NK in the past doing ransomware. 100k isn't a lot but you are talking about NK, a country that has it's diplomats

There has been pretty strong attribution for NK in the past doing ransomware. 100k isn't a lot but you are talking about NK, a country that has it's diplomats selling meth and heroin