malware family

Samas-Samsam

unknownentity:malware_familyransomware · 1 source

Ransomware Targeted attacks -Jexboss -PSExec -Hyena

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: samas-samsam
kind: malware family
status: unknown
aliases: MIKOPONI.exe · RikiRafael.exe · Samas · SamSam · samsam.exe · SamSam Ransomware · showmehowto.exe
jurisdictions: —
claims naming it: 113 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 731e4a5e-35f2-47b1-80ba-150b95fdc14dvia misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 20 of 113

SamSamransomwarepayment
subjecttransaction02b551febc…742ee6d482
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab · 230,500 sat · time 2016-02-21 19:12 UTC · url https://ransomwhe.re/#address/1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25011btcintel:annotations:25011@v3 sha256:84a727878d55ad10
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction822ef9e54f…8b76aa9913
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab · 150,000,000 sat · time 2016-02-22 05:19 UTC · url https://ransomwhe.re/#address/1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25010btcintel:annotations:25010@v3 sha256:0ee1200e52bea5bc
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransactionbc429290cc…c67a86abb4
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab · 2,050,000,000 sat · time 2016-02-23 22:20 UTC · url https://ransomwhe.re/#address/1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25009btcintel:annotations:25009@v3 sha256:4b5ecf2bd138181a
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction5404a59f1d…cf7ad335da
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab · 220,500 sat · time 2016-02-24 23:31 UTC · url https://ransomwhe.re/#address/1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25008btcintel:annotations:25008@v3 sha256:a0f4f7c839b2d652
confidencetrusted provider · 50
SamSamransomwarepayment address
subjectaddress1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw SamSam · url https://ransomwhe.re/#address/1ETLG9xnFwZ1H9xaHz6u4MX8KYvWJesMab
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_25007btcintel:annotations:25007@v2 sha256:4e3b8925134d08db
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction0f18d395ad…a01820b00e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-13 00:05 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25006btcintel:annotations:25006@v3 sha256:ffd751aba1d87e0f
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransactiond192db6e9b…01d4534c46
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-13 23:40 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25005btcintel:annotations:25005@v3 sha256:33a4dd1dce620be4
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction8f9e7e0aad…06f596fbfb
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-13 23:49 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25004btcintel:annotations:25004@v3 sha256:b8c7089a90b017a9
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction1cfe178d5c…fb493e2e60
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 01:33 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25003btcintel:annotations:25003@v3 sha256:dc53e29be64c53ec
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransactiond4bebfcf52…ac687f60cf
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 01:33 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25002btcintel:annotations:25002@v3 sha256:c4143e8e02f398a9
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransactione679db7fd9…8d5a0c1b06
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 02:30 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25001btcintel:annotations:25001@v3 sha256:d48a6656d3a60bec
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction731ae14873…8ffd7b958a
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 02:30 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25000btcintel:annotations:25000@v3 sha256:74885e9ceef6a16f
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction751018a1eb…8010a7c40e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 02:30 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24999btcintel:annotations:24999@v3 sha256:0f7767659ed3f387
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction1dce0d2c79…7f21e8ea5d
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-14 02:46 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24998btcintel:annotations:24998@v3 sha256:74eef31514e02422
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction71dd3b1add…62717efbd6
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 99,990,000 sat · time 2016-01-14 11:50 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24997btcintel:annotations:24997@v3 sha256:4be493d06c46ed5a
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction02439716db…b728b8e899
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 20,000 sat · time 2016-01-14 12:20 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24996btcintel:annotations:24996@v3 sha256:6bbfb9b2bb3922bb
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransactiond7bfab8504…be38e43380
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 100,000,000 sat · time 2016-01-17 14:52 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24995btcintel:annotations:24995@v3 sha256:efd7a4248a1f0d79
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction3f1d4b0913…4b012133f7
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2 · 10,000 sat · time 2016-01-20 10:40 UTC · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24994btcintel:annotations:24994@v3 sha256:1f89ed901ae933f1
confidencetrusted provider · 50
SamSamransomwarepayment address
subjectaddress1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw SamSam · url https://ransomwhe.re/#address/1JnxLRQSHkCw5aEhu5VQptUq4XmxntAvL2
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_24993btcintel:annotations:24993@v2 sha256:799ee2815296577a
confidencetrusted provider · 50
SamSamransomwarepayment
subjecttransaction762e58abf6…74878f610c
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 136hcUpNwhpKQQL7iXXWmwUnikX7n98xsL · 171,000,000 sat · time 2016-03-13 22:00 UTC · url https://ransomwhe.re/#address/136hcUpNwhpKQQL7iXXWmwUnikX7n98xsL
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_24911btcintel:annotations:24911@v3 sha256:7451fb12f70d1d4c
confidencetrusted provider · 50

Subjects113 subjects carry a claim naming this entity · a sample

115XeVa3r6bRzSZ55RAbzL3GCiVTXeKsDPaddress
12Z7QctstwkxxfWdrFJs1oEpDLT3jpqcPqaddress
136hcUpNwhpKQQL7iXXWmwUnikX7n98xsLaddress
13R8c99CsCMr7iz73NYYEWjsEqYp9fLtdtaddress
13Tdj8ER4kFggUPxiHjFSqPk6KTNSLNi99address
14ggugtbDt7fkNKr9DwrSU95fzJdKWjubPaddress
14UKG6AFQCsch2iJVsZKrDMxTEbkj2cdPPaddress
152YUceczz6wUrqpxetyoRZBMQuitfZw3Faddress
156Sfpz3eu615fjjhHZ3cH1czkj7i1bTRZaddress
1597m4mvFKvhcTHFDyqHqsSCgkMthK34kwaddress

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.