malware family

REvil / Sodinokibi

unknownentity:malware_familyransomware · 1 source

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: revil-sodinokibi
kind: malware family
status: unknown
aliases: —
jurisdictions: —
claims naming it: 16 · 0 attributions · 0 relations · 0 events

Identifiers

computedno identifiers recorded by any source

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 16 of 16

REvil / Sodinokibiransomwarepayment
subjecttransactionaa7d2a09fe…719fb8d599
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3E9F7gE3upQ8rgsPjwiKH7ugfdneypPjqj · 2,526 sat · time 2020-01-07 18:56 UTC · url https://ransomwhe.re/#address/3E9F7gE3upQ8rgsPjwiKH7ugfdneypPjqj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25974btcintel:annotations:25974@v3 sha256:87818f1c76d0649f
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3E9F7gE3upQ8rgsPjwiKH7ugfdneypPjqj
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3E9F7gE3upQ8rgsPjwiKH7ugfdneypPjqj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_25973btcintel:annotations:25973@v2 sha256:4480be72c31ac081
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction42d17e29e0…dea9096bbc
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV · 767,000,000 sat · time 2021-06-11 17:59 UTC · url https://ransomwhe.re/#address/3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3152btcintel:annotations:3152@v3 sha256:4efe377278a4d8a1
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_3151btcintel:annotations:3151@v2 sha256:78d7c11b98f7c9bd
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction53ee7e07e3…36721573de
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3Jxwt3fmXhUwDNDQ4sWYCgahLGDVjy1SQm · 1,106,600,000 sat · time 2021-05-26 14:51 UTC · url https://ransomwhe.re/#address/3Jxwt3fmXhUwDNDQ4sWYCgahLGDVjy1SQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3148btcintel:annotations:3148@v3 sha256:b8102d90744dff68
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3Jxwt3fmXhUwDNDQ4sWYCgahLGDVjy1SQm
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3Jxwt3fmXhUwDNDQ4sWYCgahLGDVjy1SQm
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_3147btcintel:annotations:3147@v2 sha256:c6eda981d79d8701
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction181ea2cc53…c6acb437e2
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3JYLAk26kZPw62W6UD2Jyk5i9jhCAPJjg4 · 600,602,500 sat · time 2021-04-29 13:56 UTC · url https://ransomwhe.re/#address/3JYLAk26kZPw62W6UD2Jyk5i9jhCAPJjg4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3146btcintel:annotations:3146@v3 sha256:3149fc46da00e4eb
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3JYLAk26kZPw62W6UD2Jyk5i9jhCAPJjg4
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3JYLAk26kZPw62W6UD2Jyk5i9jhCAPJjg4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_3145btcintel:annotations:3145@v2 sha256:c32c06331a858742
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction0b94e47af9…b4a97008dc
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj · 129,500,000 sat · time 2021-06-04 05:24 UTC · url https://ransomwhe.re/#address/34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_3140btcintel:annotations:3140@v3 sha256:80c1a38ff45cf4a3
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_3139btcintel:annotations:3139@v2 sha256:801971b48e3e12af
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction3629b08e3e…ef2df131c1
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3L7ECcRBCypxrS5U9Kw9WexcsHmX4wKYz6 · 30,100,000,000 sat · time 2021-06-01 23:08 UTC · url https://ransomwhe.re/#address/3L7ECcRBCypxrS5U9Kw9WexcsHmX4wKYz6
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_2000btcintel:annotations:2000@v3 sha256:d776604820a26c2a
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3L7ECcRBCypxrS5U9Kw9WexcsHmX4wKYz6
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3L7ECcRBCypxrS5U9Kw9WexcsHmX4wKYz6
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_1999btcintel:annotations:1999@v2 sha256:ea47bd12c4c124a2
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction52d576271c…58c2e58581
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK · 38,039,706 sat · time 2020-01-09 16:35 UTC · url https://ransomwhe.re/#address/3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_1177btcintel:annotations:1177@v3 sha256:6fc0eaa4577bff6c
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransactiond5ef2a9c37…a642289e53
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK · 55,000 sat · time 2020-01-09 17:15 UTC · url https://ransomwhe.re/#address/3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_1176btcintel:annotations:1176@v3 sha256:61b0c373b5f99618
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment
subjecttransaction1b5a91a603…367cbab95e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK · 55,000 sat · time 2020-01-09 17:36 UTC · url https://ransomwhe.re/#address/3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_1175btcintel:annotations:1175@v3 sha256:17ff7a3ea76f1009
confidencetrusted provider · 50
REvil / Sodinokibiransomwarepayment address
subjectaddress3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw REvil / Sodinokibi · url https://ransomwhe.re/#address/3BeQ9H5tByJK9CeeZftDsBFhgt1i5Q7AQK
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_1174btcintel:annotations:1174@v2 sha256:5e7d1504cb7ff99f
confidencetrusted provider · 50

Subjects16 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.