Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
72.52725900 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
1L1FZ9pB95doi1sAMDuG9xVFhdeB412tH Known family: Conti
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-10-21 23:29 UTC
1L1FZ9pB95doi1sAMDuG9xVFhdeB412tH → 1NBqtvniZk4NrwuM5dhsFrPqGNUxqdzP1W
Split payment
72.52725900 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qqn35hxjk4cgqfljhce27j99p8x2ltxrcz8hecj 3.81720000 BTC Trace this branch
HOP 2 · 2020-10-21 23:29 UTC
1NBqtvniZk4NrwuM5dhsFrPqGNUxqdzP1W → 1JK1YGqLTWjLSQwNDm5eH8kkbfsgudJKSU
Split payment
72.33617200 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qvk6yprm6698qyc8cwzyz33a76awt2w9h9x9fne 0.19080000 BTC Trace this branch
HOP 3 · 2020-10-21 23:29 UTC
1JK1YGqLTWjLSQwNDm5eH8kkbfsgudJKSU → 1KPTdLF5dvFWC2isj9dcve3ofqQCABAYsZ
Split payment
64.79688500 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q9wlvl738tqjp4ah2v04lc99yfd3m0vqjp30qn4 7.53900000 BTC Trace this branch
HOP 4 · 2020-10-21 23:29 UTC
1KPTdLF5dvFWC2isj9dcve3ofqQCABAYsZ → 1BwvnWRUGyDue2kqeRqY3CZMGLKoNd5h8d
Split payment
57.25759800 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qpht2kg3fjw0y7qx67g9vymfw03m38tc62t6krw 7.53900000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.