Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.65900000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
1PormUgPR72yv2FRKSVY27U4ekWMKobWjg Known family: MedusaLocker
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-04-01 16:08 UTC
1PormUgPR72yv2FRKSVY27U4ekWMKobWjg → bc1qlku48y7qnudarkqr9l7ve24lktfdf9y45aqddd
tx 17a9357b0d79ccf2…
Split payment
3.65900000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1LpL5Pe4s6xrz6Q29R8omkCNpFoDwSePj2 0.16987881 BTC Trace this branch
HOP 2 · 2021-11-22 22:35 UTC
bc1qlku48y7qnudarkqr9l7ve24lktfdf9y45aqddd → bc1qffus4xcd96rkqypu4sphuc44erkvl0ayuewd7t
tx 777337ae77a05694…
Split payment
3.65817600 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
38JPTrcNAgBEutxvnr5HbfbwCSuvv3rBKE 0.00082000 BTC Trace this branch
HOP 3 · 2021-12-22 04:46 UTC
bc1qffus4xcd96rkqypu4sphuc44erkvl0ayuewd7t → bc1qf2xvacfw9ekvkfl8xswnyjtpdkagekhn0psmgp
tx fb76fa0d0dc6f95c…
Low Risk
3.65817050 BTC
Continue from here
HOP 4 · 2023-03-22 21:05 UTC
bc1qf2xvacfw9ekvkfl8xswnyjtpdkagekhn0psmgp → 1JiYzZwdcfsyTVkNVTo9ySCab3yxtFwEJt
tx a193d16ca33df54d…
Low Risk
11.32064944 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.