Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.00000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
3QimJw4RWqQViv3MpBqTR7AKmD46UZZrTE
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-11-13 20:57 UTC
3QimJw4RWqQViv3MpBqTR7AKmD46UZZrTE → bc1q0zdu6e2vt74elxwum3pcagwxtlr3kyge9ctdrz
tx 5bbf755bff9f4ad0…
Split payment
1.00000000 BTC
Continue from here
This spend also paid 62 other addresses — not followed above, since the walk only continues down the largest branch:
3GkQNiweA6u7DUs8oYxmYUFQJSrxmgiJUA 0.60505966 BTC Trace this branch
bc1qrnzhl7a53r0tsr5k0f69cjhvwyzfwuwly92uyd 0.30250578 BTC Trace this branch
bc1qqc7x4t6gph72mzsjtu0cjwu08tnz0ewefwhzv2 0.22388105 BTC Trace this branch
bc1q0k73cy5p6t9xa0aznynhwu2e4f3hgh8ahzr46d 0.06102136 BTC Trace this branch
bc1q674h59tdjsax8c62vklqglvhcf8dsxxf4u0ln2 0.06089488 BTC Trace this branch
1GEa3hz2yZK8BWtCpXYwtfRWdyo714uSgk 0.06047071 BTC Trace this branch
39rfTqZQ1PEUmqt8Fpd98fTEjjXMxY1K52 0.06019080 BTC Trace this branch
39bJBqg11gMUnvLv8Zws3kSn6F9YiYkX9j 0.04350636 BTC Trace this branch
+ 54 more addresses not shown
HOP 2 · 2023-01-10 12:02 UTC
bc1q0zdu6e2vt74elxwum3pcagwxtlr3kyge9ctdrz → 16ogYtqvg5qXF4Aj8oCLn1PgZuDH7vidBK
tx 2b947fbd9388f6f7…
Low Risk
2.00000000 BTC
Continue from here
HOP 3 · 2022-12-06 22:33 UTC
16ogYtqvg5qXF4Aj8oCLn1PgZuDH7vidBK → bc1qw8wrek2m7nlqldll66ajnwr9mh64syvkt67zlu
tx e1b5c3742f6f4f85…
Low Risk
70.11514596 BTC
Continue from here
HOP 4 · unconfirmed
bc1qw8wrek2m7nlqldll66ajnwr9mh64syvkt67zlu → 3QzAn2xdaNzngcxuPHQBVdW7dkRfVrUzLP
tx ae18684976edf0ec…
Split payment
1.09937732 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3JLVaEMQSs5YudJYjQDmSZJoXcT67BFuVL 0.00008688 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.