WastedLocker -> Hades -> Phoenix -> PayloadBin, all same malware/group behind it. Probably a few in-between don't care to recall at the moment.

— Michael Gillespie (@demonslay335) June 5, 2021