malware family

StorageCrypter

unknownentity:malware_familyransomware · 1 source

Michael Gillespie noticed numerous submissions to ID Ransomware from South Korea for the StorageCrypter ransomware. This version is using a new ransom note named read_me_for_recover_your_files.txt.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: storagecrypter
kind: malware family
status: unknown
aliases: SambaCry
jurisdictions: —
claims naming it: 3 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy 3675e50d-3f76-45f8-b3f3-4a645779e14dvia misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 3 of 3

StorageCrypterransomwarepayment
subjecttransactionabe05baf10…d8520e5d3e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq · 40,028,900 sat · time 2017-11-28 14:22 UTC · url https://ransomwhe.re/#address/1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25603btcintel:annotations:25603@v3 sha256:9a2b4d613294bccb
confidencetrusted provider · 50
StorageCrypterransomwarepayment
subjecttransactionb846b094a5…5953261a76
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq · 38,765,300 sat · time 2017-11-29 21:01 UTC · url https://ransomwhe.re/#address/1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_25602btcintel:annotations:25602@v3 sha256:7d12786e1901adff
confidencetrusted provider · 50
StorageCrypterransomwarepayment address
subjectaddress1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencefamily raw StorageCrypter · url https://ransomwhe.re/#address/1HUqiacJ6F6yLwTeGwohEdgWVuehibEegq
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 2
ann_25601btcintel:annotations:25601@v2 sha256:669cb45ddc004ab7
confidencetrusted provider · 50

Subjects3 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.