Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
2.58031492 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qta70dm5clfcxp4deqycxjf8l3h4uymzg7g6hn5 Known family: Karakurt
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-02-21 10:27 UTC
bc1qta70dm5clfcxp4deqycxjf8l3h4uymzg7g6hn5 → bc1qjh6p55c4ng87ck3ywkhyh3fvywcmlwa5v6qa3d
Split payment
2.58031492 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qmup76z23vnx50kl5dzdx45mp7upuhcwqvg320a 1.79000000 BTC Trace this branch
HOP 2 · 2022-02-22 21:19 UTC
bc1qjh6p55c4ng87ck3ywkhyh3fvywcmlwa5v6qa3d → bc1qhn6pg2uly2dt52wyzqqa3v3sa28dxz9us3ucpa
Split payment
2.11000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0zncp6ju2dpluene2ssw4rszmckw4tx9vls576 0.47030646 BTC Trace this branch
HOP 3 · 2024-06-22 13:59 UTC
bc1qhn6pg2uly2dt52wyzqqa3v3sa28dxz9us3ucpa → bc1q0taw3walt48894sa9xpkkz9uan9zpa3qu8xm7a
Low Risk
36.52884665 BTC
HOP 4 · 2024-10-26 19:21 UTC
bc1q0taw3walt48894sa9xpkkz9uan9zpa3qu8xm7a → bc1q35wcjelx96w57q980kpydd3tr5fpkz9nk7e6ww
Low Risk
36.13840140 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.