Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.47032416 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
1FunR53XsXdAdtX7n8nejkb2nKfcDGw9Cv
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-11-13 22:57 UTC
1FunR53XsXdAdtX7n8nejkb2nKfcDGw9Cv → bc1q9ew969y7gzmh3weqyyqzs4pnlvazuzzhgvz2fe
tx 12c7c2793b6b1a47…
Split payment
0.47032416 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1H1YS6GyCPyA5Q6rmx58UzmeeDd3wXuFpN 0.20681786 BTC Trace this branch
HOP 2 · 2024-03-05 19:28 UTC
bc1q9ew969y7gzmh3weqyyqzs4pnlvazuzzhgvz2fe → 15e9tcwYT5rcPhXohDMPXv8KynrWhriKSW
tx f7c69931f43bdadb…
Low Risk
0.49963991 BTC
Continue from here
HOP 3 · 2024-03-05 19:46 UTC
15e9tcwYT5rcPhXohDMPXv8KynrWhriKSW → 1LgW4RA5iE98khRJ58Bhx5RLABP3QGjn9y
tx a57ef84a8020cf9b…
Split payment
5.36619982 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
16FUDxKpzNcWWYswhoynXjZ3SNdMNwH63D 1.81099500 BTC Trace this branch
HOP 4 · 2026-09-09 09:16 UTC
1LgW4RA5iE98khRJ58Bhx5RLABP3QGjn9y → bc1q858kfqemwuzdy958lmkn6nv076a56agwwxz9x7
tx f6459e58c5023820…
Low Risk
0.35500000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.