Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.62199367 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qeejpphun9ff0syq8t75vw6keu4p0ydepzzey78
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-25 03:47 UTC
bc1qeejpphun9ff0syq8t75vw6keu4p0ydepzzey78 → bc1qkwamlwjt9fdfpngsaafekkn73zaer8h2nqfrwu
tx 984a0eae3eccfcb1…
Split payment
0.62199367 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q04eddm9xrr2vjujkmsamn8ly355542h6e90p89 0.00095010 BTC Trace this branch
bc1p5akucnl7tasjp7cw0qej6q389hsed54uwham9ucepr4x3lygyz9q0kuvla 0.00005940 BTC Trace this branch
HOP 2 · 2025-10-10 04:25 UTC
bc1qkwamlwjt9fdfpngsaafekkn73zaer8h2nqfrwu → 3PcQExACT4yPQKdEPgvvUUGLWHJp8z5qRN
tx 84ba1704738c9d59…
Low Risk
1.71400000 BTC
Continue from here
HOP 3 · 2025-10-10 06:20 UTC
3PcQExACT4yPQKdEPgvvUUGLWHJp8z5qRN → 3FD7my8rHDxLyGMLcxdeyV3eHLbTLNA34X
tx 98d994001c9939ed…
Low Risk
1.71400246 BTC
Continue from here
HOP 4 · 2026-09-03 12:21 UTC
3FD7my8rHDxLyGMLcxdeyV3eHLbTLNA34X → 14eVerMSCwzXQm4oXBQf5zsqjECbp4aXuD
tx b38b2e580f61036f…
Low Risk
71.52737800 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.