Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
28.25000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qufacauqaudvnnlzdg2y0hnnafsg0utqv5nxc6m Known family: Conti
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-10-09 17:56 UTC
bc1qufacauqaudvnnlzdg2y0hnnafsg0utqv5nxc6m → bc1q7x2aun5usrtdx4rtsm0vmlhxry46t93qhg0rul
tx 5e27c1595de84ee2…
Split payment
28.25000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qvzd0ytupl4cv64yxgmy7nuw8fx3fz7r3v2279v 24.24982200 BTC Trace this branch
153A88YKKZtQTABAcBvvWVq1JDJLYCsgpQ 22.50000000 BTC Trace this branch
HOP 2 · 2020-10-09 17:56 UTC
bc1q7x2aun5usrtdx4rtsm0vmlhxry46t93qhg0rul → 33cmajNiHUxgUYY7EWS16P3BUnvFMf8MbG
tx a4a970551c317cc3…
Split payment
15.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q2gxjga5e8yyjcfcmtpqhxk2uz8nq99eapqn3e3 13.24985500 BTC Trace this branch
HOP 3 · 2020-10-09 18:06 UTC
33cmajNiHUxgUYY7EWS16P3BUnvFMf8MbG → 3NoRu3nyLoJ72tZiB75Yi2JZgbpFwxmVYN
tx b1613d4494a812b3…
Low Risk
17.21360300 BTC
Continue from here
HOP 4 · 2020-11-11 20:42 UTC
3NoRu3nyLoJ72tZiB75Yi2JZgbpFwxmVYN → 36qMUNUDfCcfvaFnLXhDU3d4qpXwYE9ckG
tx 6db0915a759bcef5…
Low Risk
60.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.