Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
7.75629496 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q2muhfugejgft7smu0ejze22het2rkmnpdccx5j Known family: Conti
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-06-20 06:05 UTC
bc1q2muhfugejgft7smu0ejze22het2rkmnpdccx5j → bc1qf32jzpgdxh0gpqjut680w97c4dsmrundl0qajp
tx 373fd37c43849cf0…
Split payment
7.75629496 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q4msv5jd0mpr57nvqzdaasdvv0mgsdyl5w4j7m3 1.93902186 BTC Trace this branch
HOP 2 · 2021-06-20 15:02 UTC
bc1qf32jzpgdxh0gpqjut680w97c4dsmrundl0qajp → bc1qwglr3ay8t9ze3e55tw6f97fmdzff4zqmvjrcla
tx 1330278d1128d0ac…
Split payment
3.87810000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1LoQqRjVHmS4hQTJZA2dzDdvupsdtweapc 3.87810000 BTC Trace this branch
HOP 3 · 2021-07-10 11:02 UTC
bc1qwglr3ay8t9ze3e55tw6f97fmdzff4zqmvjrcla → bc1qh8csa7gjaraz6lxrtmxsyfyssvc8n70n3lzfee
tx d71e06729d7715ec…
Low Risk
3.87806150 BTC
Continue from here
HOP 4 · 2021-07-25 20:44 UTC
bc1qh8csa7gjaraz6lxrtmxsyfyssvc8n70n3lzfee → 1Dz3rwGNVQ6AGi5sSv8jKtCX2eQBJRBxPc
tx a1a43d561967b82e…
Low Risk
21.16515433 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.