malware family

HiddenTear

unknownentity:malware_familyransomware · 1 source

Ransomware Open sourced C#

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: hiddentear
kind: malware family
status: unknown
aliases: Cryptear · EDA2 · Hidden Tear
jurisdictions: —
claims naming it: 8 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 254f4f67-d850-4dc5-8ddb-2e955ddea287via misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 8 of 8

EDA2ransomwarepayment
subjecttransaction06fe54e865…4367795667
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB · 1,101,192 sat · time 2016-03-04 19:39 UTC · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21642btcintel:annotations:21642@v3 sha256:3bb529cd725aad66
confidencetrusted provider · 50
EDA2ransomwarepayment
subjecttransaction257687d129…ff9dbba14a
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB · 50,006,300 sat · time 2016-03-10 19:20 UTC · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21641btcintel:annotations:21641@v3 sha256:cf20d3aee4d599e9
confidencetrusted provider · 50
EDA2ransomwarepayment
subjecttransactionb0b6dab261…e905a4d070
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB · 51,582,984 sat · time 2016-03-24 08:49 UTC · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21640btcintel:annotations:21640@v3 sha256:93a4190d1e71ae7e
confidencetrusted provider · 50
EDA2ransomwarepayment
subjecttransactiond596a496c1…6d4cb69e24
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB · 12,812,600 sat · time 2016-03-26 13:21 UTC · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21639btcintel:annotations:21639@v3 sha256:20d11d7f940ed6f5
confidencetrusted provider · 50
EDA2ransomwarepayment
subjecttransaction0f774a24d8…52ed351d8d
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB · 35,523,279 sat · time 2016-03-31 00:13 UTC · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21638btcintel:annotations:21638@v3 sha256:dfe72836c22b5cb0
confidencetrusted provider · 50
EDA2ransomwarepayment address
subjectaddress192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw EDA2 · url https://ransomwhe.re/#address/192awRvM4V8LS24GSHj6o3v2fVQ5QYh4pB
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21637btcintel:annotations:21637@v2 sha256:c69757708e43ffda
confidencetrusted provider · 50
EDA2ransomwarepayment
subjecttransaction7209b2d5fa…c6731a1bc2
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 18JJdvhdvHPwDTnht3N8LQWx7fdtuGnPxi · 10,000,000 sat · time 2014-10-01 03:48 UTC · url https://ransomwhe.re/#address/18JJdvhdvHPwDTnht3N8LQWx7fdtuGnPxi
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_21533btcintel:annotations:21533@v3 sha256:01e2981aeff9e876
confidencetrusted provider · 50
EDA2ransomwarepayment address
subjectaddress18JJdvhdvHPwDTnht3N8LQWx7fdtuGnPxi
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw EDA2 · url https://ransomwhe.re/#address/18JJdvhdvHPwDTnht3N8LQWx7fdtuGnPxi
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21532btcintel:annotations:21532@v2 sha256:1d042f612ba802f7
confidencetrusted provider · 50

Subjects8 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.