Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
17.34611287 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qs3lv77udkap2enxv928x59yuact5df4t95rsqr Known family: Cuba
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-02-27 20:43 UTC
bc1qs3lv77udkap2enxv928x59yuact5df4t95rsqr → bc1qlzqu0a09lslhlw5ljapdtcmghjuavh0fjhq6cv
tx 00935c75ed98e342…
Split payment
17.34611287 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1LTTq1q1ksfRmae5UbSA8xMPCYZYQcYDvv 8.65483000 BTC Trace this branch
HOP 2 · 2020-02-27 21:15 UTC
bc1qlzqu0a09lslhlw5ljapdtcmghjuavh0fjhq6cv → 177tEZgnozWe8HFHT7DZ6XseNzguyydrNR
tx 831b500caebb5223…
Split payment
10.49632560 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qhc6lcpjq68qdmwxsce6kqxhf7z9cj88hhylm5w 6.84974148 BTC Trace this branch
HOP 3 · 2020-02-27 21:15 UTC
177tEZgnozWe8HFHT7DZ6XseNzguyydrNR → 3Kpazyk3m4G59sfcbobL7w9vrFnV3qJp6d
tx b38434fadf269573…
Low Risk
7.53720000 BTC
Continue from here
HOP 4 · 2020-02-27 21:25 UTC
3Kpazyk3m4G59sfcbobL7w9vrFnV3qJp6d → 1BtSE7AXX5RuRRcnbhiM3qBwMhEYwxqBsm
tx 97037b1af229e02e…
Split payment
7.53709440 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3Bj2jVXAdkdCiPgnGuqxjhQEdZAVDo3hdf 3.12673423 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.