Last seven days
- First activity
- Jul 19, 2026
- Last activity
- Jul 19, 2026
- Feed role
- C2
- Host form
- 1 IP / 0 hostnames
Shade is a ransomware family referenced in the provided content as a historical example of a ransomware operation that released master decryption keys upon shutdown.
Profile source: Mallory opens in a new tabShade
Shade is a ransomware family referenced in the provided content as a historical example of a ransomware operation that released master decryption keys upon shutdown. The content does not provide technical details on Shadeβs malware behavior, infection vector, platform-specific implementation, associated threat actor, targeting, or indicators of compromise beyond naming it alongside Crysis and TeslaCrypt as ransomware families that released decryption keys. No additional high-confidence operational or forensic details are available in the provided material.
C2 tracking
Derp observations, rolling seven-day window
Samples
Reporting
...like was done with Crysis, TeslaCrypt, and Shade.
"...release the master decryption keys... as was done with Crysis, TeslaCrypt, and Shade."
"Shade Ransomware creater is stupid fxxxxx.exe" @ Any.Run
Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.