Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.44400000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q3fc9nzt5lngxv5kcmrg5ydjsg4p6t7vwx0zjru
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-31 10:15 UTC
bc1q3fc9nzt5lngxv5kcmrg5ydjsg4p6t7vwx0zjru → bc1qn5p057jduelhpser7ahfadqr2xr4p5xza04k4q
Split payment
0.44400000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qew85yzw6u95vx0g7lfug5zwnaq09404d3q83uc 0.22194800 BTC Trace this branch
HOP 2 · 2022-02-01 15:34 UTC
bc1qn5p057jduelhpser7ahfadqr2xr4p5xza04k4q → bc1q6a7k87u4a5006xh9f4res4qxsdj2397y2c52ct
Split payment
1.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q56l7w6k28yln732q4a3usn3muphw9vxuajntdz 0.60557646 BTC Trace this branch
HOP 3 · 2022-02-01 17:30 UTC
bc1q6a7k87u4a5006xh9f4res4qxsdj2397y2c52ct → bc1qu3w5gupcspms8k4l5ru8pgh7t9xqx5q324flxq
Low Risk
1.99997739 BTC
HOP 4 · 2022-02-01 17:50 UTC
bc1qu3w5gupcspms8k4l5ru8pgh7t9xqx5q324flxq → bc1qej3je5vwjlcu2zk76nxl957t90ae6088crtu9k
Split payment
1.76695900 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1TyAu3qNUGEADZoEWPEj8yM54zdtHzTnq 0.23300000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.