Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.78612737 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
15pfMg7G4abQ3bkzZ82TW4hRzpXEe94YXx
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-11-13 19:31 UTC
15pfMg7G4abQ3bkzZ82TW4hRzpXEe94YXx → 1EtWAT78XrQ7RVEtKZesK7c4uxyMJByzQU
tx d214df8b63f6f509…
Split payment
7.78612737 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1PkwjDqYCYqKFLFVAAZ5GCDN7bHBnXsjxt 0.93692307 BTC Trace this branch
HOP 2 · 2022-11-13 19:31 UTC
1EtWAT78XrQ7RVEtKZesK7c4uxyMJByzQU → 1NbdYT648pcADb8LX1MkLB25CoTcZY4Ejt
tx b03bb597e74b24c7…
Split payment
4.27792862 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
15kGt8f5i58iDoFSjicNhwiDx7nSjrWJ2j 3.50816282 BTC Trace this branch
HOP 3 · 2022-11-13 19:50 UTC
1NbdYT648pcADb8LX1MkLB25CoTcZY4Ejt → 1PkwjDqYCYqKFLFVAAZ5GCDN7bHBnXsjxt
tx 0d8324a9c0f5be9a…
Low Risk
6.79460633 BTC
Continue from here
HOP 4 · 2023-02-13 08:53 UTC
1PkwjDqYCYqKFLFVAAZ5GCDN7bHBnXsjxt → 1HckjUpRGcrrRAtFaaCAUaGjsPx9oYmLaZ
tx 6c5476dae0fa28d8…
Low Risk
83.68260459 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.