Transaction

fd39c811a762e5ce5abd286e6c0b67eeaf66773533488fcecd871decb112e874

506,003 confirmations

Chain

facts from the index · observations computed by extractors

computedno observations · a plain transaction

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

WannaCryransomwarepaymentWannaCrymalware family
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw · 4,813 sat · time 2017-05-16 00:41 UTC · url https://ransomwhe.re/#address/12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_1559btcintel:annotations:1559@v3 sha256:087b7820b2b0855d
confidencetrusted provider · 50

pays12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw4,813 sat · 0.00004813 BTCWannaCryann_1399 · sha256:2badf61bc5303e31

One hop only. Nothing is propagated beyond the addresses this transaction touches.

MITRE ATT&CK Enterpriserecords thatLazarus GroupusesWannaCry
fetch —sha256 81113ba98afa2928
rel_547btcintel:relations:547@v2 sha256:9346c96df730c0ee
confidenceauthority data · 60

A proposal becomes a draft a human reviews; nothing is published on its own.

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

computedNo community notes yet. Notes published to public relays with a bitcoin subject appear here, the ones posted from btcintel included.