Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
4.88628964 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qskwn60dznjjt40ryxyr8aw7rn96yzmlu9ne8f0
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-08 14:37 UTC
bc1qskwn60dznjjt40ryxyr8aw7rn96yzmlu9ne8f0 → bc1qmnup9us478z73rplcnh295m644r5g4f6gdylar
tx 4985006caa462105…
Low Risk
4.88628964 BTC
Continue from here
HOP 2 · 2026-09-08 18:58 UTC
bc1qmnup9us478z73rplcnh295m644r5g4f6gdylar → bc1q0sjktk5006vkhcd5ztpewqqtghmana8mpvagt9
tx 021f64c30c35993f…
Split payment
12.00118232 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qxn7alsvlyf6978epg94lf8940u6g6skm5895l6 2.58468738 BTC Trace this branch
HOP 3 · 2026-09-08 19:06 UTC
bc1q0sjktk5006vkhcd5ztpewqqtghmana8mpvagt9 → bc1qrzpw7gw959l5e792ln2ekrd4a4uhsupyhjs5e4
tx 7ddecc5615230a2d…
Low Risk
12.00117682 BTC
Continue from here
HOP 4 · 2026-09-09 19:14 UTC
bc1qrzpw7gw959l5e792ln2ekrd4a4uhsupyhjs5e4 → bc1q0fycgp9sta5a2m9weh4y4nc8u257l33p5tzykc
tx d6d6f9b29a47c26a…
Low Risk
2.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.