Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.05925465 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3NL6WfzELq2jG6kDE4yRnnLjiNXw59VaUW
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-01-10 17:57 UTC
3NL6WfzELq2jG6kDE4yRnnLjiNXw59VaUW → 1BW5wEzt97Eu8GYGtS4FddzF5TcTZRZrY4
Split payment
0.05925465 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
39tgLYTdN2sqfhVeJhZJZ1NuzNFZarExdA 0.00069427 BTC Trace this branch
HOP 2 · 2020-01-10 18:04 UTC
1BW5wEzt97Eu8GYGtS4FddzF5TcTZRZrY4 → 3D2bBVzxr9x54MikfEndnhvkLveSfovXdp
Low Risk
0.22106736 BTC
HOP 3 · 2020-01-10 18:32 UTC
3D2bBVzxr9x54MikfEndnhvkLveSfovXdp → 3Q4N33ZJ7HSBu3AGZMrFrFEurQPPmFXLEV
Split payment
18.47864211 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3N8tUPPm1dxycf88dmwiM94v5fhnWXyx9p 0.00706930 BTC Trace this branch
HOP 4 · 2020-01-10 19:28 UTC
3Q4N33ZJ7HSBu3AGZMrFrFEurQPPmFXLEV → 3GVFDTxH3sUgF3jh3Upy8R9GrEqF4GnbtT
Split payment
18.14048021 BTC
This spend also paid 18 other addresses — not followed above, since the walk only continues down the largest branch:
1GHbj5fvjHhdwFw9AuWdeAXKXGjLhCC9m1 0.18222654 BTC Trace this branch
3AEDohCQ5W5WV5tUnZB1dsoWQkNhLiH3s8 0.07000000 BTC Trace this branch
3BQNg2izHQnq6jt22NEugQdPY88njFkTXD 0.02134263 BTC Trace this branch
12UMnKt3HUxNjNFtJRT8JtCp9mJ6yN5q9Q 0.02030086 BTC Trace this branch
3QjwTv1iMNFpYrPzdSJGjTPWqb5gC9CiEt 0.00724753 BTC Trace this branch
3GNxXzBQULeNfoCvzCKdgQ68t75Ba57dau 0.00646276 BTC Trace this branch
3Lb74FYExgdrsramGHnaq7Z6iw35GoFtsq 0.00587418 BTC Trace this branch
3JYnrp1QZpJTR769mdWsSUtspT751uar5C 0.00470000 BTC Trace this branch
+ 10 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.