malware family

DMALocker

unknownentity:malware_familyransomware · 1 source

Ransomware no extension change Encrypted files have prefix: Version 1: ABCXYZ11 - Version 2: !DMALOCK - Version 3: !DMALOCK3.0 - Version 4: !DMALOCK4.0

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: dmalocker
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 3 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 407ebc7c-5b05-488f-862f-b2bf6c562372via misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 3 of 3

DMALockerransomwarepayment
subjecttransactione84a01ad34…1f9eafaba2
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG · 60,000,000 sat · time 2015-12-28 13:18 UTC · url https://ransomwhe.re/#address/1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21007btcintel:annotations:21007@v3 sha256:39a329d54d65d7ef
confidencetrusted provider · 50
DMALockerransomwarepayment
subjecttransactione09438033e…5078900a67
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG · 55,121,000 sat · time 2016-01-04 21:41 UTC · url https://ransomwhe.re/#address/1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21006btcintel:annotations:21006@v3 sha256:0012d382d2ab2c11
confidencetrusted provider · 50
DMALockerransomwarepayment address
subjectaddress1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw DMALocker · url https://ransomwhe.re/#address/1382JAg5xbQv7QNwq1svDeyw6ELtNCmujG
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21005btcintel:annotations:21005@v2 sha256:2be182c5532f541c
confidencetrusted provider · 50

Subjects3 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.