Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.10579134 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
1Mgh9FQvZWWRXHzyZ5kAvNHTpyCY1K4Ebr
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-08-03 11:35 UTC
1Mgh9FQvZWWRXHzyZ5kAvNHTpyCY1K4Ebr → 1Ar4mjPiSTq6sFf3Un1rxz9gnRv2yVTeBH
Split payment
3.10579134 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1BmSeGsUn48o3U59bdbJPU4HeyxZeJp6yB 0.40000000 BTC Trace this branch
HOP 2 · 2021-08-23 07:00 UTC
1Ar4mjPiSTq6sFf3Un1rxz9gnRv2yVTeBH → 1DHbqwMfaF7J36DbFffnwb3J4XqHpjfcit
Split payment
2.98577091 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1CB4bG3f29BGHQfuMza53NYxpnbuKjFg4 0.12000000 BTC Trace this branch
HOP 3 · 2021-11-18 12:19 UTC
1DHbqwMfaF7J36DbFffnwb3J4XqHpjfcit → bc1qgn24lnu3mlgvt3sqyea9x60weekkftghjku9cz
Split payment
2.98574084 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qza8f0yywa2n4ym8da53tn7ptpdxutche4zndea 0.00001684 BTC Trace this branch
HOP 4 · 2021-11-18 15:31 UTC
bc1qgn24lnu3mlgvt3sqyea9x60weekkftghjku9cz → bc1qtg9yajumefr3yxx4k7fhjny0qyar3jpshnr4pn
Split payment
2.55573214 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qza8f0yywa2n4ym8da53tn7ptpdxutche4zndea 0.43000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.