{
	"id": "1fd0b9d5-94ae-47c2-b509-2b794347c71a",
	"created_at": "2026-04-06T00:09:37.664156Z",
	"updated_at": "2026-04-10T03:21:39.896001Z",
	"deleted_at": null,
	"sha1_hash": "436d2936f36d3f09579eb7a36a26e26a53aef4e8",
	"title": "Groove x RAMP : The relation between Groove, Babuk, Payload.bin, RAMP, and BlackMatter",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 485271,
	"plain_text": "Groove x RAMP : The relation between Groove, Babuk, Payload.bin,\r\nRAMP, and BlackMatter\r\nBy S2W\r\nPublished: 2021-09-10 · Archived: 2026-04-05 18:01:45 UTC\r\nHotsauce | S2W TALON\r\nThe relation graph of Groove, Babuk, Payload.bin, RAMP, and BlackMatter\r\nGroove mentioned several cryptocurrency wallet addresses such as BTC, XMR and ETH. Those addresses are same\r\nas RAMP’s addresses mentioned on their leak site.\r\nGroove used the file server same as BlackMatter and Babuk [2].\r\nThe operator of RAMP was linked to the operator of Babuk and Payload.bin [3].\r\nPress enter or click to view image in full size\r\nAnalyzed by Xarvis\r\nGroove’s BTC, XMR and ETH == RAMP\r\nBTC: 1EZhsp26j4ZfDfKyXpweUtGgrs3fnpPCEd\r\nETH: 0xF6a4906fA254ce0e9175E2C3418Dde999b99ed1F\r\nXMR:\r\n47GyLQAPw4Ee3WVTgCtSxwNcRinsEm3jdSX8FH4DLbjb5t79CJDxrK9gMNVJNDfCLEjhdJZyWCPBG5CkiTnGqMvnPgK\r\nPress enter or click to view image in full size\r\nhttps://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d\r\nPage 1 of 2\n\nComparison of cryptocurrency addresses between Groove and RAMP\r\nHomepage: https://www.s2wlab.com\r\nFacebook: https://www.facebook.com/S2WLAB/\r\nTwitter: https://twitter.com/s2wlab\r\nSource: https://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d\r\nhttps://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://medium.com/s2wlab/groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d"
	],
	"report_names": [
		"groove-x-ramp-the-relation-between-groove-babuk-ramp-and-blackmatter-f75644f8f92d"
	],
	"threat_actors": [],
	"ts_created_at": 1775434177,
	"ts_updated_at": 1775791299,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/436d2936f36d3f09579eb7a36a26e26a53aef4e8.pdf",
		"text": "https://archive.orkl.eu/436d2936f36d3f09579eb7a36a26e26a53aef4e8.txt",
		"img": "https://archive.orkl.eu/436d2936f36d3f09579eb7a36a26e26a53aef4e8.jpg"
	}
}