Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
21.59997465 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
37n8nyjh2DSks3vLzbBU8dBTkRgHPnPHSe Known family: Conti
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-02-01 18:33 UTC
37n8nyjh2DSks3vLzbBU8dBTkRgHPnPHSe → 3GKUmX6SdoLitoAn3Lt91mo9fRcYoXSDR6
tx 9d142e5d79497ffd…
Split payment
21.59997465 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1EjznnKv35A3Q6J15npdyuqTYVYKB6Npxh 2.40000000 BTC Trace this branch
HOP 2 · 2020-02-01 18:33 UTC
3GKUmX6SdoLitoAn3Lt91mo9fRcYoXSDR6 → 385Q6Fwzf275KUM3CuhxbVtZyR2km2C3iH
tx 6a05e8cb455ae99f…
Split payment
13.19994930 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
176DCQLtqqJCQGhPFTJeihHemE9heGCH9y 8.40000000 BTC Trace this branch
HOP 3 · 2020-02-01 18:33 UTC
385Q6Fwzf275KUM3CuhxbVtZyR2km2C3iH → 32D4fdteR7NRX9n6gj2VXm4qCaWXEY3Yho
tx 8a1bdf0861f8954e…
Split payment
7.80000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3J8tHp7i8yCNU52cqzJvogzxenPG5N2C84 5.39992425 BTC Trace this branch
HOP 4 · 2020-03-13 10:02 UTC
32D4fdteR7NRX9n6gj2VXm4qCaWXEY3Yho → 3R2K1A4WNkhE8QAuUwcekCMacxSvFKPhK2
tx 44d68389f2cc0f1f…
Low Risk
306.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.