Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.08915489 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q0s5rm8fzuu793rly6d9z22pc83gslu7gl2g7n2
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 15:26 UTC
bc1q0s5rm8fzuu793rly6d9z22pc83gslu7gl2g7n2 → bc1qe2anq0xlcjz7fjnjeyxk0rv24mystlfutqwlzw
tx b417276d2b26fbd0…
Split payment
0.08915489 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qe92f4j2rfkpehwjl89s37atft9rqyjpd7de8rs 0.01079586 BTC Trace this branch
HOP 2 · 2026-09-08 17:14 UTC
bc1qe2anq0xlcjz7fjnjeyxk0rv24mystlfutqwlzw → bc1qncrc0j8kzsv25unyk48prz0qxw23vjkg8aa4q8
tx 7fee1bac47ef4e0f…
Split payment
1.55000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q3x2z2enz4ngwr93shyf0y9tv60sl2x4g0a3sur 0.46944182 BTC Trace this branch
HOP 3 · 2026-09-08 17:29 UTC
bc1qncrc0j8kzsv25unyk48prz0qxw23vjkg8aa4q8 → 3AW8iAkp4WaUjG78W3dhdj4vDQpZGmyn3e
tx f51fd6d353d92ea4…
Low Risk
0.84000000 BTC
Continue from here
HOP 4 · 2026-09-01 16:19 UTC
3AW8iAkp4WaUjG78W3dhdj4vDQpZGmyn3e → bc1q9wvygkq7h9xgcp59mc6ghzczrqlgrj9k3ey9tz
tx d50dba76b40a9a24…
Low Risk
14.88087153 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.