Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
6.79098014 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qx9eu6k3yhtve9n6jtnagza8l2509y7uudwe9f6 Known family: Karakurt
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-09 18:46 UTC
bc1qx9eu6k3yhtve9n6jtnagza8l2509y7uudwe9f6 → bc1qtnr3z86rsdj9vktk6agw3cqvq79tqcjhkvces0
tx f270e9b210a6bbe6…
Low Risk
6.79098014 BTC
Continue from here
HOP 2 · 2022-01-09 18:58 UTC
bc1qtnr3z86rsdj9vktk6agw3cqvq79tqcjhkvces0 → bc1qgp0t2jtclve7vgq5n90vysjdy75jetl9qdrz7y
tx 338a4dd368f80412…
Low Risk
2.00000000 BTC
Continue from here
HOP 3 · 2022-01-09 19:56 UTC
bc1qgp0t2jtclve7vgq5n90vysjdy75jetl9qdrz7y → bc1qgq4sqq2w8v59mq9fmm2gmjx4c7etm4apd60ndt
tx 44474411c9af182f…
Split payment
1.99952407 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q8lzzs7jmd8euuakn9nhs4m05ryqxfn9nc0y7vp 0.00046796 BTC Trace this branch
HOP 4 · 2022-01-09 20:47 UTC
bc1qgq4sqq2w8v59mq9fmm2gmjx4c7etm4apd60ndt → bc1qlfhkucrdddcf70wym9y5609wrqyq9v66hz64q0
tx a1146c37b6165b1d…
Split payment
1.97852696 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3EYMJMRmsM9ixuBY4YkYoK51z8QvgjZqix 0.02098908 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.