malware family

Netwalker (Mailto)

unknownentity:malware_familyransomware · 1 source

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: netwalker-mailto
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 300 · 0 attributions · 0 relations · 0 events

Identifiers

computedno identifiers recorded by any source

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 20 of 300

Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1qzf593zdg0fw7kmxrp4vgmx96zhsdee5khrftcj
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1qzf593zdg0fw7kmxrp4vgmx96zhsdee5khrftcj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2415btcintel:annotations:2415@v2 sha256:328c1df1e5d58ba9
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1q8r398v5v4aw0a6cah3ddd8nngq2nfqr40xpg3q
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1q8r398v5v4aw0a6cah3ddd8nngq2nfqr40xpg3q
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2395btcintel:annotations:2395@v2 sha256:0b077bd123f2207a
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1qq2ju8mz5whsu6g08t2rgtq8c0jnnj6s90zd279
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1qq2ju8mz5whsu6g08t2rgtq8c0jnnj6s90zd279
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2393btcintel:annotations:2393@v2 sha256:af329ec07b2db986
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1q9dd8k6jtdsc7yrefk0ythmhpensn22m26ge7rl
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1q9dd8k6jtdsc7yrefk0ythmhpensn22m26ge7rl
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2386btcintel:annotations:2386@v2 sha256:f99f5339d2e46939
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction5610f0b7b2…7c3b50a72a
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q4qdsh3vveypwekxwpgeruh28revh62af7yz8ph · 400,000,000 sat · time 2020-04-06 18:13 UTC · url https://ransomwhe.re/#address/bc1q4qdsh3vveypwekxwpgeruh28revh62af7yz8ph
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2383btcintel:annotations:2383@v3 sha256:bffc769e27a3b6d1
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1q4qdsh3vveypwekxwpgeruh28revh62af7yz8ph
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1q4qdsh3vveypwekxwpgeruh28revh62af7yz8ph
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2382btcintel:annotations:2382@v2 sha256:b2104def5730839e
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1qf25ayzqsranmvnc8l72s6mdqvkvlr6mqrfcqg8
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1qf25ayzqsranmvnc8l72s6mdqvkvlr6mqrfcqg8
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2380btcintel:annotations:2380@v2 sha256:34b2c30e659bda1d
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction08c0a72c40…da0e5798d1
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1qsypgqumac6y643we80xxst35acpmcal2cv34cn · 500,000,000 sat · time 2020-07-11 07:50 UTC · url https://ransomwhe.re/#address/bc1qsypgqumac6y643we80xxst35acpmcal2cv34cn
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2378btcintel:annotations:2378@v3 sha256:f36cbceb3ea47dd2
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1qsypgqumac6y643we80xxst35acpmcal2cv34cn
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1qsypgqumac6y643we80xxst35acpmcal2cv34cn
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2376btcintel:annotations:2376@v2 sha256:0978f942fd138fd0
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment address
subjectaddressbc1q7aghpv8l4gwha7sfzrvx0v5m5y9rh4h2skgvu5
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw Netwalker (Mailto) · url https://ransomwhe.re/#address/bc1q7aghpv8l4gwha7sfzrvx0v5m5y9rh4h2skgvu5
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_2374btcintel:annotations:2374@v2 sha256:67e9764603881b60
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction0a46ad625c…cdf08a149e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 516,715 sat · time 2020-03-01 00:04 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2366btcintel:annotations:2366@v3 sha256:3d3c73ca57ac7bd9
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction91b56a3ecb…6556508393
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 21,737,487 sat · time 2020-03-11 00:19 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2365btcintel:annotations:2365@v3 sha256:b674d5e5cb9fb196
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction099aa3bcfb…a3cc1acbe1
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 21,729,929 sat · time 2020-03-13 17:20 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2364btcintel:annotations:2364@v3 sha256:5b10dd2deed13684
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransactionab258d4818…57e2d7e5dc
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 297,991,228 sat · time 2020-03-16 11:29 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2363btcintel:annotations:2363@v3 sha256:75144c2819c14d61
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction92977eb5fe…076bef54b3
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 2,541,979,899 sat · time 2020-03-18 22:32 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2362btcintel:annotations:2362@v3 sha256:13bed66b165bdbd8
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction8a4f4b050f…c3c5681bcb
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 289,778,892 sat · time 2020-03-19 21:14 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2361btcintel:annotations:2361@v3 sha256:c4beb3b23ba05153
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction2eea91d7ea…c6a99840fb
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 2,340,079,366 sat · time 2020-03-21 20:24 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2360btcintel:annotations:2360@v3 sha256:0add421648ca1930
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction8d6dcde7ef…2be65a9b19
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 87,633,783 sat · time 2020-03-28 13:09 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2359btcintel:annotations:2359@v3 sha256:ef263ce877399f41
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransaction1618a08e2d…deacbbe6f8
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 1,223,109,336 sat · time 2020-04-03 11:28 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2355btcintel:annotations:2355@v3 sha256:ceac9c38b1d00a38
confidencetrusted provider · 50
Netwalker (Mailto)ransomwarepayment
subjecttransactionab1c433c1e…3a281a64be
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidenceamount sat 17,115,518 sat · payment bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p · 14,648,352 sat · payment bc1qzf593zdg0fw7kmxrp4vgmx96zhsdee5khrftcj · 2,467,166 sat · time 2020-04-04 18:25 UTC · url https://ransomwhe.re/#address/bc1q98z5gcxan998h0uem0y4y4qtmm45xk4r2e5m9p
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 6
ann_2354btcintel:annotations:2354@v6 sha256:2dbc8de21d59e6e4
confidencetrusted provider · 50

Subjects300 subjects carry a claim naming this entity · a sample

12bG5T6kvj9iWPzCxTjPcWipKaRDLLXZBLaddress
13DFuTYQhKQyj7m5pNzWrySsNUnFakcojpaddress
13i19sWBpe5Z6P6HHigNFW1ebeWhXzmPfSaddress
13msidWLjvS6HUAmQcDj98nLno4BzZusXTaddress
14fHcTQx7wwcbMa5opGqdJXTSEqTGRtoxSaddress
17TMc2UkVRSga2yYvuxSD9Q1XyB2EPRjTFaddress
18x7PieotZcmMwYSaYbbV8X3zBMentd5Fuaddress
19nwTbrjLRRjxXam8NxExib8uWuuA78Cu3address
1AHod4t1vpW9aLxQM4CEcj5cxdCmQnpgLDaddress
1C7FeXMf18mGrcF59DJTkmxnRfkKeG1KFZaddress

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.