malware family
Avaddon
unknownentity:malware_familyransomware · 1 source
Avaddon is a ransomware malware targeting Windows systems often spread via malicious spam. The first known attack where Avaddon ransomware was distributed was in February 2020. Avaddon encrypts files using the extension .avdn and uses a TOR payment site for the ransom payment.
Curated · btcintel
claims we make, each with its source and citation · sources may contradict; we show the set, never a score
Facts
- id
- avaddon
- kind
- malware family
- status
- unknown
- aliases
- —
- jurisdictions
- —
- claims naming it
- 2 · 0 attributions · 0 relations · 0 events
Identifiers
- attack S0640via mitre-attack
- misp-galaxy fdfbe721-abd1-4760-8e52-f23306f6cb80via misp-galaxy-ransomware
Relations
computedno relations recorded for this entity
Events
computedno dated events recorded for this entity
Claims naming this entitynewest first · 2 of 2
- AvaddonransomwarepaymentsourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencepayment bc1q65f238kv6gc235smuzcehshxcqljn2g7l5sz7j · 2,410,000 sat · time 2021-05-12 11:36 UTC · url https://ransomwhe.re/#address/bc1q65f238kv6gc235smuzcehshxcqljn2g7l5sz7jfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3ann_3138btcintel:annotations:3138@v3 sha256:5dcc519f48ae9d8aconfidencetrusted provider · 50
- Avaddonransomwarepayment addresssourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0evidencefamily raw Avaddon · url https://ransomwhe.re/#address/bc1q65f238kv6gc235smuzcehshxcqljn2g7l5sz7jfetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2ann_3137btcintel:annotations:3137@v2 sha256:4a63aef1f009f68aconfidencetrusted provider · 50
Subjects2 subjects carry a claim naming this entity · a sample
Community
notes from Nostr labelers · never merged with the bands above · not endorsed
Community content is indexed from Nostr and not endorsed by btcintel.
not computed yetNot indexed yet: the community index has not looked at this subject.