malware family

Flyper

unknownentity:malware_familyransomware · 1 source

Ransomware Based on EDA2 / HiddenTear

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: flyper
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 7 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 1a110f7e-8820-4a9a-86c0-db4056f0b911via misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 7 of 7

Flyperransomwarepayment
subjecttransaction447a86dffc…98e8336580
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS · 33,827,439 sat · time 2016-12-23 07:58 UTC · url https://ransomwhe.re/#address/1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21821btcintel:annotations:21821@v3 sha256:1c95185b269a2ce8
confidencetrusted provider · 50
Flyperransomwarepayment
subjecttransaction06214f640e…a97fa7bfad
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS · 14,950,000 sat · time 2018-06-21 20:56 UTC · url https://ransomwhe.re/#address/1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21820btcintel:annotations:21820@v3 sha256:592d103ea63de2b0
confidencetrusted provider · 50
Flyperransomwarepayment address
subjectaddress1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Flyper · url https://ransomwhe.re/#address/1PniPmm5kiuuAhXpBWR3QJiUtpfAAFm2SS
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21819btcintel:annotations:21819@v2 sha256:a241b6acb1747e5b
confidencetrusted provider · 50
Flyperransomwarepayment
subjecttransactionf7e2debfae…77c9833694
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV · 5,430 sat · time 2016-10-04 00:13 UTC · url https://ransomwhe.re/#address/1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21818btcintel:annotations:21818@v3 sha256:62345d345990cde5
confidencetrusted provider · 50
Flyperransomwarepayment
subjecttransaction073e96c53a…0851857916
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV · 109,950,000 sat · time 2018-05-01 11:42 UTC · url https://ransomwhe.re/#address/1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21817btcintel:annotations:21817@v3 sha256:f55425efedebdf39
confidencetrusted provider · 50
Flyperransomwarepayment
subjecttransaction109cc5fb53…d1dfbfe092
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV · 2,000,000 sat · time 2018-07-06 14:07 UTC · url https://ransomwhe.re/#address/1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21816btcintel:annotations:21816@v3 sha256:c4d368c64ab371eb
confidencetrusted provider · 50
Flyperransomwarepayment address
subjectaddress1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Flyper · url https://ransomwhe.re/#address/1P29xxkwy6wvLxJVA2cLoXBri2hZzaweSV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21815btcintel:annotations:21815@v2 sha256:29e195021a573a3f
confidencetrusted provider · 50

Subjects7 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.