Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
33.51198010 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1q4vr25xkth35qslenqwd7aw020w85qrvlrhv7hc Known family: Cuba
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-09-26 00:11 UTC
bc1q4vr25xkth35qslenqwd7aw020w85qrvlrhv7hc → bc1qhv966qsejl938xpvx76vphefj6u8yjqd3wcy7a
Split payment
33.51198010 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1RRz38xSfqGcTg3PA4VPLiWZMAoMSnncv 3.72350000 BTC Trace this branch
HOP 2 · 2021-09-26 00:11 UTC
bc1qhv966qsejl938xpvx76vphefj6u8yjqd3wcy7a → bc1qn253cx257vcjkve6hgjql4pdgnwlhhrnm3djjq
Split payment
21.83667154 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3KJQtQtu1KDrsjW1Aq4S3tRrTs87EEMN8f 11.67530000 BTC Trace this branch
HOP 3 · 2021-09-26 15:45 UTC
bc1qn253cx257vcjkve6hgjql4pdgnwlhhrnm3djjq → 1L7jCspzjvtRiFGphakKbKRDfQrkMqUPkA
Low Risk
21.83666473 BTC
HOP 4 · 2021-09-27 12:18 UTC
1L7jCspzjvtRiFGphakKbKRDfQrkMqUPkA → bc1qlle7302pdsmz3puev0c27dux7k5ne04p07twgm
Split payment
14.83644373 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qsnmh5v5q6ksheazczaqvv36aypv455uavv2tk6 7.00000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.