Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.96476901 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1q2w59d32dn9vm0ynt2yxjfcy7d676zqcfqe7qa3
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-01 05:48 UTC
bc1q2w59d32dn9vm0ynt2yxjfcy7d676zqcfqe7qa3 → bc1qc82pdh5zy8kk6gc0t0kjpggu9pg80zewsmy4ac
tx 39548097e9f8dc67…
Low Risk
1.96476901 BTC
Continue from here
HOP 2 · 2026-09-05 09:40 UTC
bc1qc82pdh5zy8kk6gc0t0kjpggu9pg80zewsmy4ac → 3BVxJgZ3H94aad3Qv2PpUdyt8yK41EPcf2
tx 28b29c26d70601d6…
Low Risk
2.00703969 BTC
Continue from here
HOP 3 · 2026-09-09 06:24 UTC
3BVxJgZ3H94aad3Qv2PpUdyt8yK41EPcf2 → bc1q9wvygkq7h9xgcp59mc6ghzczrqlgrj9k3ey9tz
tx 0b8c2dcd29eb2a3c…
Low Risk
19.55422882 BTC
Continue from here
HOP 4 · 2026-09-07 13:06 UTC
bc1q9wvygkq7h9xgcp59mc6ghzczrqlgrj9k3ey9tz → bc1qrt7rkpswpgmcag7txzf6ps9mvepwgndshqdx6d
tx e05b61c875ee0e52…
Split payment
36.83468185 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
1KbDEg1tDz2ErYgaDbaDhhawnLrSQFaFx5 12.19997000 BTC Trace this branch
bc1q0yl93d0gxafyvwsn5xgaqqkzg2xtwdjy5ndn0t 0.12557235 BTC Trace this branch
15mjppyhk49gt1SUUE7dvVv1EBBPJHr6ne 0.00449280 BTC Trace this branch
1MKP6K61FFoCZNzRQriuLkuo6kcV4aEh3J 0.00033940 BTC Trace this branch
bc1q3fj2eqtstcpuaqvqnad40uzzpnesskurehdv6q 0.00023800 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.