Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
157.95090214 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3BAQ2ZdHXG8D2Qp7hnZ66RPpPevFb6Fer6 Known family: Conti
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2019-10-04 02:52 UTC
3BAQ2ZdHXG8D2Qp7hnZ66RPpPevFb6Fer6 → 33BTz6nZtkB3epdUww5QsUTPw6ZCcRNktY
tx 5e40869f15fc1b0b…
Split payment
157.95090214 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1LBDCWA573X7xMfRAWTRdGDY9pDF6dXG2B 85.05000000 BTC Trace this branch
HOP 2 · 2019-10-04 02:52 UTC
33BTz6nZtkB3epdUww5QsUTPw6ZCcRNktY → 3BBWf3H6AyrCaVAywaFf4qSdY8CU6Mk99J
tx 157c56eb3b6b9148…
Split payment
109.35083116 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
172VttLkDNZW6JyUYZrBgsmB9W9FT8Hsq4 48.60000000 BTC Trace this branch
HOP 3 · 2019-10-04 02:52 UTC
3BBWf3H6AyrCaVAywaFf4qSdY8CU6Mk99J → 3CeKoa1SN7gZ7PmgY19W6RkeHR95VxPhrj
tx 5e36cbc24989ff31…
Split payment
85.05076018 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1csT5eg6zVzF8hytWHYzJ6oMb7aiStqCj 24.30000000 BTC Trace this branch
HOP 4 · 2019-10-04 02:52 UTC
3CeKoa1SN7gZ7PmgY19W6RkeHR95VxPhrj → 3HU1E4xYMzk6XnB7VNVNTyCpXQ9VxrjUyt
tx dca7ae063b96e306…
Low Risk
85.05070348 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.