Skip to content
Malware family

Shade

Shade is a ransomware family referenced in the provided content as a historical example of a ransomware operation that released master decryption keys upon shutdown.

Profile source: Mallory opens in a new tab

Shade

Family profile

Shade is a ransomware family referenced in the provided content as a historical example of a ransomware operation that released master decryption keys upon shutdown. The content does not provide technical details on Shade’s malware behavior, infection vector, platform-specific implementation, associated threat actor, targeting, or indicators of compromise beyond naming it alongside Crysis and TeslaCrypt as ransomware families that released decryption keys. No additional high-confidence operational or forensic details are available in the provided material.

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Jul 19, 2026
Last activity
Jul 19, 2026
Feed role
C2
Host form
1 IP / 0 hostnames

Leading locations

  • LU1

Leading providers

  • Ghosty Networks LLC1

Infrastructure traits

  • Hosting 1

Samples

Recent associated samples

Reporting

Research mentioning Shade

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.