Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
18.00092873 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
3NsgkAq5YnJDFURU29b83kqMaghhbyevUp Known family: Conti
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2019-12-19 18:49 UTC
3NsgkAq5YnJDFURU29b83kqMaghhbyevUp → 3E5Q5k8JR1r4i17Fx5LHNQ1kpq2Za4yChF
Split payment
18.00092873 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1EGY4X7JMiFHqAMnBmTJSNwX5ThMZopWp8 12.00000000 BTC Trace this branch
HOP 2 · 2019-12-19 18:49 UTC
3E5Q5k8JR1r4i17Fx5LHNQ1kpq2Za4yChF → 3AU8g4yXahJ785HE7MAJWzscDCBb5vAZLZ
Split payment
9.75000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3FMkaMJHBE2dvo4nBkZWnHKPfdSj1zjssG 8.25089032 BTC Trace this branch
HOP 3 · 2019-12-19 21:37 UTC
3AU8g4yXahJ785HE7MAJWzscDCBb5vAZLZ → 3J9wyugfggxuw1PwHW2iFU7m8mjmqqjrBn
Split payment
35.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3NagWcCEfxjwPshxyS9BAZJt55pz26vK3h 20.77359685 BTC Trace this branch
HOP 4 · 2020-01-29 19:59 UTC
3J9wyugfggxuw1PwHW2iFU7m8mjmqqjrBn → 343cfQBH6poMsu2WMePQ162JYu4pAg3U4E
Split payment
34.99967328 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3JuZZxivMpsq4ny8gg34jsoC721uMYtZhM 0.00030000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.