Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.99950000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q9e0gjh73q7grqnqxfwmpcqhczvkmxr8gdpzmsy
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-27 22:14 UTC
bc1q9e0gjh73q7grqnqxfwmpcqhczvkmxr8gdpzmsy → bc1qz9cky3ul7szt3ngl6ae5gajl7wujx89lemqpul
Low Risk
1.99950000 BTC
HOP 2 · 2022-01-27 23:21 UTC
bc1qz9cky3ul7szt3ngl6ae5gajl7wujx89lemqpul → bc1q3u8nqunl2mfpzxyza23vrtxw7cshj6hkc3f2l0
Split payment
2.15804803 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q34eyhzxc8ndxhr9rkllawps7ywcmn6aruh22rg 0.18499220 BTC Trace this branch
HOP 3 · 2022-01-28 05:29 UTC
bc1q3u8nqunl2mfpzxyza23vrtxw7cshj6hkc3f2l0 → 1Ni5XszzPMdKHCGx2qMkRgyLXDjrsaZpas
Split payment
5.60155000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qgg326qzc2grmguhmcyrvpuf4kvkkrtc5j3nsrf 0.64899724 BTC Trace this branch
HOP 4 · 2022-04-19 02:04 UTC
1Ni5XszzPMdKHCGx2qMkRgyLXDjrsaZpas → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
Split payment
10.33297020 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qezkar036whe87psk58nkac73tqmtwlcm2me4s4 0.01827260 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.