Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
9.81594595 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
36jMyHnGEMXPqsBumUGw5WtFFVJSmW4xW4 Known family: Conti
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2019-09-18 21:56 UTC
36jMyHnGEMXPqsBumUGw5WtFFVJSmW4xW4 → 34C5HnxgTvg7LE6wcyemgPTikdn4xbqdH2
tx 47427b479e45162a…
Split payment
9.81594595 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
13iLQsd8DJFdPrBMzyammms79c22dZv9zf 5.28500000 BTC Trace this branch
HOP 2 · 2019-09-18 21:56 UTC
34C5HnxgTvg7LE6wcyemgPTikdn4xbqdH2 → 32J4ssrzUBoBwS1LL3ixx8CuhhHmxa6PD3
tx 018eb0027b115d59…
Split payment
8.30591215 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1CWgbnFHzi6e8hkX2znm3qCdv979sMn23m 1.51000000 BTC Trace this branch
HOP 3 · 2019-09-18 22:02 UTC
32J4ssrzUBoBwS1LL3ixx8CuhhHmxa6PD3 → 3ERprnHmQyHnDs9cuyusJYmTCkk2MrbP58
tx 8d74cff7e90259d8…
Split payment
5.28587835 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1JHkMBjsgRkLAzE3vKf63dEhSg1JgNNffU 3.02000000 BTC Trace this branch
HOP 4 · 2019-09-18 22:07 UTC
3ERprnHmQyHnDs9cuyusJYmTCkk2MrbP58 → 3LLLdtdf3ewwXgsnj78oUXcdnAL9qP14cv
tx 5f52b5c60f3feb66…
Low Risk
5.28585135 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.