Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.02949630 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q5keramzz8pfuxnzg5qcyf6cerqdj64e6ewynfz
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2025-10-03 14:33 UTC
bc1q5keramzz8pfuxnzg5qcyf6cerqdj64e6ewynfz → bc1qxt7g2xua298w99u4xey8pyltwg42yks08kh7j8
tx 919fa8fa40b5e661…
Low Risk
7.02949630 BTC
Continue from here
HOP 2 · 2025-10-05 06:36 UTC
bc1qxt7g2xua298w99u4xey8pyltwg42yks08kh7j8 → bc1qkfhz2gmjlkzjs70jk7wddk73cu27gf70khuapx
tx 457275dbcd61c794…
Split payment
10.01239230 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qdxs80sdudlrwwkyhcs4kf7rgrn0rn0du884jnq 4.48026270 BTC Trace this branch
HOP 3 · 2025-10-05 20:28 UTC
bc1qkfhz2gmjlkzjs70jk7wddk73cu27gf70khuapx → bc1qgtw8yzkkhjund566vu7rufw44x4cuz8plnx56e
tx 13435892b4e32b90…
Split payment
5.01238800 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qkl4scfegn606s05hznu5jtnlvp66svkr40krr2 5.00000000 BTC Trace this branch
HOP 4 · 2025-10-05 20:28 UTC
bc1qgtw8yzkkhjund566vu7rufw44x4cuz8plnx56e → bc1qeg0jhmmfemet7rtfmq9gzc7qpec238u2t8hgz8
tx cbf8e3f0a152b365…
Low Risk
5.01238536 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.