Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
80.37020781 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
1GuPsTqJjib8t2idTaLwa95kRLtiWhrE5A Known family: Netwalker (Mailto)
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-06-04 16:04 UTC
1GuPsTqJjib8t2idTaLwa95kRLtiWhrE5A → 1Ggsch5d5S3yhF7ZwoVKiJWk7fk8FFXea2
tx 4dcb251541ead5c3…
Split payment
80.37020781 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1Bo9q7TVP4a4pmFrHzDtebXKgHmjYqBzT6 80.37005256 BTC Trace this branch
HOP 2 · 2020-06-13 19:23 UTC
1Ggsch5d5S3yhF7ZwoVKiJWk7fk8FFXea2 → 3M6yEoqLuGWfH3UEAdfYjE4fxc6TcFqxqq
tx e953249f317a098f…
Split payment
50.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1KxMgjazpCR3hf16Y5TEGSxwM8x9nCYoCm 30.37017414 BTC Trace this branch
HOP 3 · 2020-06-13 19:47 UTC
3M6yEoqLuGWfH3UEAdfYjE4fxc6TcFqxqq → 3DMNVfV9gRzaiQthGS16oRmcWTezGr6HYN
tx 7b1234f7295abbf4…
Split payment
47.03499786 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
178gPM5NMr6UFHN8BvwCWv6aPAkrDweQrQ 2.96496774 BTC Trace this branch
HOP 4 · 2020-06-13 20:17 UTC
3DMNVfV9gRzaiQthGS16oRmcWTezGr6HYN → 3EFZTZgqnNGAHcL2DEs53MX6QMzoSnVuft
tx 227ebcb151162f34…
Split payment
42.26136867 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1Eqcex5eRsdUkPzarEqTpDqq7prmAVN7sc 4.77359651 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.