malware family

RansomPlus

unknownentity:malware_familyransomware · 1 source

Author of this ransomware is sergej. Ransom is 0.25 bitcoins for the return of files. Originated in English. Used worldwide. This ransomware is spread with the help of email spam, fake ads, fake updates, infected install files.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: ransomplus
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 1 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy c039a50b-f5f9-4ad0-8b66-e1d8cc86717bvia misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 1 of 1

RansomPlusransomwarepayment address
subjectaddress36QLSBTuBvK5rKD6PsM9tTFaacrjHCSNGd
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw RansomPlus · url https://ransomwhe.re/#address/36QLSBTuBvK5rKD6PsM9tTFaacrjHCSNGd
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_23843btcintel:annotations:23843@v2 sha256:756276bd9d5fd3ea
confidencetrusted provider · 50

Subjects1 subjects carry a claim naming this entity · a sample

36QLSBTuBvK5rKD6PsM9tTFaacrjHCSNGdaddress

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.