malware family

Hive

unknownentity:malware_familyransomware · 1 source

First observed in June 2021, Hive ransomware was originally written in GoLang but recently, new Hive variants have been seen written in Rust. Targets Healthcare sector.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: hive
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 3 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 8ce915d3-8c6d-4841-b509-18379d7a8999via misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 3 of 3

Hiveransomwarepayment
subjecttransaction85c756604f…37f44ccf5e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9 · 1,000,000 sat · time 2022-11-17 13:47 UTC · url https://ransomwhe.re/#address/bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_32292btcintel:annotations:32292@v3 sha256:f125ee1a6031cc0f
confidencetrusted provider · 50
Hiveransomwarepayment
subjecttransactiondf978e0367…74e92b59d5
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9 · 3,503,000,000 sat · time 2022-11-17 14:01 UTC · url https://ransomwhe.re/#address/bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_32291btcintel:annotations:32291@v3 sha256:954947d4bd5af6a5
confidencetrusted provider · 50
Hiveransomwarepayment address
subjectaddressbc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Hive · url https://ransomwhe.re/#address/bc1q4frmv39nmvdsxjnen8jm7ykgz68w7p38v5pry9
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_32290btcintel:annotations:32290@v2 sha256:c9b939d94105b3d7
confidencetrusted provider · 50

Subjects3 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.