Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
38.89748000 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1q5uc0fdnz0ve5pg4nl4upa9ly586t6wmnghfe7x Known family: Cuba
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-05-20 17:36 UTC
bc1q5uc0fdnz0ve5pg4nl4upa9ly586t6wmnghfe7x → bc1qc5lg5gv3cy6n2zykv8s43dzd9vlj9gxq540z3z
Split payment
38.89748000 BTC
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qmvsr5mrmsy9k6c30m8x98mzhc4slnu27gss5nr 32.24852000 BTC Trace this branch
bc1quq76lg854e7vulmm3nwhg7622a989f820nvfu7 25.91864239 BTC Trace this branch
1JAjtCEKLuzn5h27tmSRbRrbwwSvdCikgn 6.23548800 BTC Trace this branch
HOP 2 · 2020-05-20 21:13 UTC
bc1qc5lg5gv3cy6n2zykv8s43dzd9vlj9gxq540z3z → 1HThU51avCeE4L4WCCw2q63z6XWsEbkXVL
Split payment
16.50000000 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qe8xvvxxhwpenr2uxyqyyyas45ggteflttmrdcr 11.80000000 BTC Trace this branch
bc1qkxxu9hq7cxkgnlplfjwvsvqjejfhjdya4g0yx6 10.59669635 BTC Trace this branch
HOP 3 · 2020-05-20 21:25 UTC
1HThU51avCeE4L4WCCw2q63z6XWsEbkXVL → 1JsACYBoRCYkz7DSgyKurMyibbmHwcHbPd
Split payment
16.50000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q58tymemsah9va8sv92pwmpeaylpmv6mmngkcwl 6.19939998 BTC Trace this branch
HOP 4 · 2020-03-20 16:21 UTC
1JsACYBoRCYkz7DSgyKurMyibbmHwcHbPd → 1NDyJtNTjmwk5xPNhjgAMu4HDHigtobu1s
Split payment
100.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3HePePJgBvVubeM633nCPWe1voJfEjp969 0.01030818 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.