malware family

Nemucod

unknownentity:malware_familyransomware · 1 source

Ransomware 7zip (a0.exe) variant cannot be decrypted Encrypts the first 2048 Bytes

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

computedno relations recorded for this entity

computedno dated events recorded for this entity

Nemucodransomwarepayment address
subjectaddress1GfcsTZP2ayn5MxLL4nCSjnswNuJCnEui1
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Nemucod · url https://ransomwhe.re/#address/1GfcsTZP2ayn5MxLL4nCSjnswNuJCnEui1
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23833btcintel:annotations:23833@v2 sha256:6b143208278376aa
confidencetrusted provider · 50
Nemucodransomwarepayment address
subjectaddress189HtAYguwV22oAnny9wm9UpG7xFu7To4Z
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Nemucod · url https://ransomwhe.re/#address/189HtAYguwV22oAnny9wm9UpG7xFu7To4Z
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21696btcintel:annotations:21696@v2 sha256:2f5397fac53dd13c
confidencetrusted provider · 50
Nemucodransomwarepayment address
subjectaddress12msFUcuvM4XJFMdnbGtTtf2q1g31JodGD
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Nemucod · url https://ransomwhe.re/#address/12msFUcuvM4XJFMdnbGtTtf2q1g31JodGD
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_21544btcintel:annotations:21544@v2 sha256:df9ecaf2533e5fa1
confidencetrusted provider · 50

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.