Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.93059034 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
1FfmYMoKmyASHkqcYVSNbaVUJEiJyTnsFp
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-31 13:44 UTC
1FfmYMoKmyASHkqcYVSNbaVUJEiJyTnsFp → 1GrwDkr33gT6LuumniYjKEGjTLhsL5kmqC
tx 153a6d255db16579…
Low Risk
3.93059034 BTC
Continue from here
HOP 2 · 2026-09-08 03:19 UTC
1GrwDkr33gT6LuumniYjKEGjTLhsL5kmqC → 12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs
tx 2ac3c25060a194da…
Split payment
192.59458431 BTC
Continue from here
This spend also paid 6 other addresses — not followed above, since the walk only continues down the largest branch:
3J181J8GXt8AmNC8dHTvnbN17z21JgZUoN 15.00000000 BTC Trace this branch
bc1qz8ttn6sfunu8sy6usj6xnjlmz4jsdxvljrgjq6 0.00501857 BTC Trace this branch
1GYK5f7SMrKL6jg3SrKCNgyUHjMqMHaJ4D 0.00123914 BTC Trace this branch
bc1qmk378vskc9t92wgglatv49mh534kkmjenmh3pl 0.00097040 BTC Trace this branch
1JDomZgMEg5pPTyQandfd8oae3TyG9B7t5 0.00043300 BTC Trace this branch
bc1qhwpsf26fg23j4fhd929sg9fr3za4s3pmn3ugep 0.00029941 BTC Trace this branch
HOP 3 · 2026-09-08 01:19 UTC
12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs → 1DLeNApsHNNzUMNZJVoXeyEY5sdp8vzx3w
tx 0328749616565d2c…
Split payment
209.09755024 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qx47sgu3w5pdfg8wxulrwy9e8ahhcyqp4ydm7xu 0.00242109 BTC Trace this branch
bc1qe295mmgmhn9cnulqwtc4r7pj06zt6ek0cw9kl2 0.00169449 BTC Trace this branch
bc1qm62sa3l0mfc0yw0z99830frf63675hnps5h45w 0.00165668 BTC Trace this branch
bc1qd3tsffef0c3p2ldawk0mt92qwc6tfwfl0ccmwz 0.00050000 BTC Trace this branch
bc1q8xjq00xsgsepsqeugczyyezkzcx9quhxvplcss 0.00035467 BTC Trace this branch
HOP 4 · 2026-09-08 01:34 UTC
1DLeNApsHNNzUMNZJVoXeyEY5sdp8vzx3w → 12XZMdaAGmcHf4ocFSqpd8jFd1WH7RHUPs
tx d7f82ee4745bdab5…
Self-consolidation
208.65329236 BTC
Continue from here
This spend also paid 10 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qhkz5r06wt2z3ztn4z9hu2qyj0fxhzu5q4nr0kw 0.13199680 BTC Trace this branch
bc1qhsjmu0jf4j6wg0g8savq7fmq7fr3m5m3jgguff 0.09945662 BTC Trace this branch
bc1q5xry57yhvt5cvsj8ygkspq4gwuzzqfyqkgvdum 0.06646221 BTC Trace this branch
1GU1FoUvQC7xgiTD1dBeucUASNsRS8t6Vv 0.06293300 BTC Trace this branch
1GAX6it9Q5KThhZAkqMPSBFUG19yNV6gvD 0.04315441 BTC Trace this branch
bc1q72gr4phu6hv2mux5g2gwsqyelakrxyuua8y6x4 0.02527047 BTC Trace this branch
bc1qsd5s3ljj3l9w9qqzzr9ky6wucyk85zrq7350hu 0.00918000 BTC Trace this branch
bc1qdwj674s6xl8nrulj7r8euu0hd5hqcywj2ar7z8 0.00415301 BTC Trace this branch
+ 2 more addresses not shown
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.