Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.25198990 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qenjstexazw07gugftfz76gh9r4zkhhvc9eeh47 Known family: Karakurt
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-12 13:50 UTC
bc1qenjstexazw07gugftfz76gh9r4zkhhvc9eeh47 → bc1qqrx2mptmymt37mrhp9u5rhhftrmvg666r2ja39
tx 7388ce5e6e3e73a6…
Split payment
3.25198990 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qazd54ekxjx28uy4ad69lzret4uzmztkw3d4485 1.41436720 BTC Trace this branch
HOP 2 · 2022-01-12 13:50 UTC
bc1qqrx2mptmymt37mrhp9u5rhhftrmvg666r2ja39 → bc1quyqael8yypaa35xfq2nzhgc7cp48453yk4tptm
tx 81f9054c3812fbf5…
Low Risk
3.25198770 BTC
Continue from here
HOP 3 · 2022-01-18 13:00 UTC
bc1quyqael8yypaa35xfq2nzhgc7cp48453yk4tptm → bc1q3t0kff2t0rns0lwlay34u7dzwrrdkk7ktuc9vx
tx 8dbbcf8eca34875d…
Split payment
2.25198220 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qr3szx4v7w9jgy78az5rqxw5vv7ppr0d0nd2q9h 1.00000000 BTC Trace this branch
HOP 4 · 2022-01-28 16:15 UTC
bc1q3t0kff2t0rns0lwlay34u7dzwrrdkk7ktuc9vx → bc1qfpw87svlq222rxazt8v0zxavhnua23jle293ewf4vxzywuskthvsd305xr
tx 9ccd40ca77e09771…
Split payment
1.95090000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qwh9qhy62z7whrme404c7lq8ct3aaaxslsfut4t 0.30106017 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.