malware family

CryptConsole

unknownentity:malware_familyransomware · 1 source

This ransomware does not actually encrypt your file, but only changes the names of your files, just like Globe Ransomware. This ransomware is spread with the help of email spam, fake ads, fake updates, infected install files

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: cryptconsole
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 28 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 42508fd8-3c2d-44b2-9b74-33c5d82b297dvia misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 20 of 28

CryptConsoleransomwarepayment
subjecttransaction6eb59d8476…0e6af553a2
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1M4CkSF12u9twHSwzHUAAknr1YsnmnY8Zm · 50,000,000 sat · time 2017-02-07 12:44 UTC · url https://ransomwhe.re/#address/1M4CkSF12u9twHSwzHUAAknr1YsnmnY8Zm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23935btcintel:annotations:23935@v3 sha256:e1f0c8f9d0ffa4f2
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress1M4CkSF12u9twHSwzHUAAknr1YsnmnY8Zm
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/1M4CkSF12u9twHSwzHUAAknr1YsnmnY8Zm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23934btcintel:annotations:23934@v2 sha256:7dd0dfda0d84d4fe
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress1GSB5sJFASF9X7w4sS7Xr8rTZE4ToZP2Bq
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/1GSB5sJFASF9X7w4sS7Xr8rTZE4ToZP2Bq
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23845btcintel:annotations:23845@v2 sha256:929ae67eee1e8957
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress18kBvWUsWQdP6TtH1wLw5MWm3NKgMVwWqf
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/18kBvWUsWQdP6TtH1wLw5MWm3NKgMVwWqf
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23841btcintel:annotations:23841@v2 sha256:c806c4748b5d706e
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress1PLZtR66AHmUuNYgjr3tVULwyzQkBBQNC9
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/1PLZtR66AHmUuNYgjr3tVULwyzQkBBQNC9
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23721btcintel:annotations:23721@v2 sha256:12248f17765c30fa
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction10425fc982…0ecb5d9072
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 1,336,302 sat · time 2016-04-28 17:37 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21779btcintel:annotations:21779@v3 sha256:1d7ddd784214b4b1
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction34524a5935…a599a17a9b
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 678,228 sat · time 2016-05-05 09:59 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21778btcintel:annotations:21778@v3 sha256:cc53f14088c38ebe
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction4a67faeadb…0051ecb4fc
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 551,049 sat · time 2016-05-10 21:26 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21777btcintel:annotations:21777@v3 sha256:aa4cba75d115d571
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction7da9c22213…cd28618034
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 30,000,000 sat · time 2017-01-25 11:49 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21776btcintel:annotations:21776@v3 sha256:4ca1a59ed49a482e
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransactiond4604fbc31…87147b0d22
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 5,310 sat · time 2017-01-25 12:25 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21775btcintel:annotations:21775@v3 sha256:c82c9eb667e18b4e
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction15a0edd244…2dc21e3d4b
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 25,000,000 sat · time 2017-01-26 06:23 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21774btcintel:annotations:21774@v3 sha256:3238d235394390e8
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction41fae6c6fd…9cd3ed05b0
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 5,310 sat · time 2017-01-26 10:19 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21773btcintel:annotations:21773@v3 sha256:34b7ec679bac1588
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction3fb7427cf8…35592ee192
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 50,000,000 sat · time 2017-01-31 14:14 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21772btcintel:annotations:21772@v3 sha256:49c9ba3888cf3ecb
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction12f325b989…1a5398fff8
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 5,310 sat · time 2017-01-31 15:36 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21771btcintel:annotations:21771@v3 sha256:599262bfdf61768e
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction47203ac584…a41bcb7c46
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm · 50,300,000 sat · time 2017-02-01 07:54 UTC · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21770btcintel:annotations:21770@v3 sha256:0b2784ca654ce78e
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21769btcintel:annotations:21769@v2 sha256:16367bfeed3668b0
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction6b6e28e339…a538bb035e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro · 20,000,000 sat · time 2017-01-30 11:39 UTC · url https://ransomwhe.re/#address/1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21706btcintel:annotations:21706@v3 sha256:2116f20766dfbf71
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction6011be7fd9…9fe7515a0c
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro · 50,000,000 sat · time 2017-01-31 21:50 UTC · url https://ransomwhe.re/#address/1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21705btcintel:annotations:21705@v3 sha256:c577d70610af6be2
confidencetrusted provider · 50
CryptConsoleransomwarepayment address
subjectaddress1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw CryptConsole · url https://ransomwhe.re/#address/1GfxDzSzyBzRNiP5zXqaa32qybify4G7ro
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21704btcintel:annotations:21704@v2 sha256:0674adeb8295da99
confidencetrusted provider · 50
CryptConsoleransomwarepayment
subjecttransaction0e2e4837bf…e2ef3ca9e9
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1LmSuGJwxBBRL9t5RMZVCeTbvsGnxMwcaf · 2,000,000 sat · time 2017-03-03 22:15 UTC · url https://ransomwhe.re/#address/1LmSuGJwxBBRL9t5RMZVCeTbvsGnxMwcaf
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21645btcintel:annotations:21645@v3 sha256:818ae8f106975e88
confidencetrusted provider · 50

Subjects28 subjects carry a claim naming this entity · a sample

14h5cEcF6ajw6RD9h8f97GGnpaqVJKn1Tyaddress
18kBvWUsWQdP6TtH1wLw5MWm3NKgMVwWqfaddress
1GfxDzSzyBzRNiP5zXqaa32qybify4G7roaddress
1GSB5sJFASF9X7w4sS7Xr8rTZE4ToZP2Bqaddress
1GXLDTdWTBGNdeQaKLKoVZRuwiXhmgUe3Maddress
1KG8rWYWRYHfvjVe8ddEyJNCg6HxVWYSQmaddress
1LK6iedToCUuDwTDXBQK724hhg2Sabo7baaddress
1LmSuGJwxBBRL9t5RMZVCeTbvsGnxMwcafaddress
1M4CkSF12u9twHSwzHUAAknr1YsnmnY8Zmaddress
1PLZtR66AHmUuNYgjr3tVULwyzQkBBQNC9address

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.