Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.43237681 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qze8nnlj3pkr7x229qdvyzxtdwylae8fhp7my8z
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-26 10:07 UTC
bc1qze8nnlj3pkr7x229qdvyzxtdwylae8fhp7my8z → 3NsdamA2Suj4t17fuyqTxTFL7nAGyEMTEs
tx 882de8c7004974a6…
Low Risk
0.43237681 BTC
Continue from here
HOP 2 · 2022-01-29 11:16 UTC
3NsdamA2Suj4t17fuyqTxTFL7nAGyEMTEs → 36E8FRoDQiH6YFZS7DYc5huqSTDCyyZVKD
tx 2a501a796c96cb0b…
Split payment
0.13246423 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
36hJ4xWtcfgid9f4TaD6gjR8vGY5qWDEaC 0.13017679 BTC Trace this branch
3ApF41RQKdA58hreKPs4UJNkdD61oBBEGt 0.09805885 BTC Trace this branch
bc1qheh2x6j2ke9xe9xdchk5cywqkwansuhwagwsxm 0.07167023 BTC Trace this branch
HOP 3 · 2022-02-01 01:31 UTC
36E8FRoDQiH6YFZS7DYc5huqSTDCyyZVKD → bc1qvfn4qcx6eerqqvnavhr5e7zwn4ne29u6scu0sq
tx 7edfc6e6b10d28da…
Split payment
35.27295695 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
3QeSSxArWjBiGGUdkzLwhQwbwna1w6QnGu 0.10348746 BTC Trace this branch
3Hxw8gL5p7CGvsr1kazsn4JRmZkNGWbm47 0.10305169 BTC Trace this branch
HOP 4 · 2022-02-04 09:24 UTC
bc1qvfn4qcx6eerqqvnavhr5e7zwn4ne29u6scu0sq → 3QMpufQumdiDkvLnyTXg2MqcFbK5dm9KXv
tx f1e93fdc729f294d…
Low Risk
35.27295029 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.