Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
76.94999700 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
1Lc1pysi5ofcvm6Tu298SDsX5dzLu5Hdvg Known family: Conti
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-09-23 20:55 UTC
1Lc1pysi5ofcvm6Tu298SDsX5dzLu5Hdvg → 1B3ihatKSUBgwQnUBF9eqWjWRGNWa614sh
Split payment
76.94999700 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q05d5u3a4agl0wxmfhfav2t2vz2ymkp0r00gd44 4.05000000 BTC Trace this branch
HOP 2 · 2020-09-23 20:55 UTC
1B3ihatKSUBgwQnUBF9eqWjWRGNWa614sh → 1L84GAuJC6pGHCBLTtp1qAqD1VjEy9dFj6
Split payment
68.51249400 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qg53rmlz5nd2xehdyp04w45p8g074yfxehsfqte 8.43750000 BTC Trace this branch
HOP 3 · 2020-09-23 20:55 UTC
1L84GAuJC6pGHCBLTtp1qAqD1VjEy9dFj6 → 1FuKWGqKD4meqD4YGy6fpmeLUfJ9GCgrNA
Split payment
60.07499100 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qmtmj3fm3splm3lq3a77alsvh6kj0ef0230mlp8 8.43750000 BTC Trace this branch
HOP 4 · 2020-09-23 20:55 UTC
1FuKWGqKD4meqD4YGy6fpmeLUfJ9GCgrNA → 1GWC8DAtHRKfzv5431Amp35HricXnNTx1Z
Split payment
56.69998800 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qlg9mmylhuwj7en3fxwcang5tjghhhancza5gvn 3.37500000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.