Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
86.45009809 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
1
Starting Address
35tokppmTKjELs5dM8omk4i2kUBQqcn3so Known family: Conti
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-10-22 22:35 UTC
35tokppmTKjELs5dM8omk4i2kUBQqcn3so → 3MGt926W19vRqEY5SkhCZrsqT38MYyNnyb
Split payment
86.45009809 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3CVU44DEH5Yy26QGSDbU9wL2PtLP3xUo1d 46.55000000 BTC Trace this branch
HOP 2 · 2020-10-22 22:35 UTC
3MGt926W19vRqEY5SkhCZrsqT38MYyNnyb → 3N7zs6DdiPYVu3oBZByVcoryPuKmq3yeGc
Split payment
73.14986994 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1FxcoCd8SQns9o9bb5opKeCGTD3TdPxfET 13.30000000 BTC Trace this branch
HOP 3 · 2020-10-22 22:45 UTC
3N7zs6DdiPYVu3oBZByVcoryPuKmq3yeGc → 1PYwNUuiJ3SQFqmNsA9Ys3HVaYtGG6fe8G
Split payment
46.55000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3CYKdUKyqShqvHcuaF8jamXgEAhuzFFpqk 26.59964179 BTC Trace this branch
HOP 4 · 2020-02-06 16:05 UTC
1PYwNUuiJ3SQFqmNsA9Ys3HVaYtGG6fe8G → 15ZiXV59pa6zq91T9uBda7SKifFrJo59eF
High Risk
41.69992452 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
12HQDsicffSBaYdJ6BhnE22sfjTESmmzKx OFAC 31.80000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.