Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
12.86800000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
31rwgQjVZn3CDDwy4dwKoHin2r4U8naSmH
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-09-15 16:13 UTC
31rwgQjVZn3CDDwy4dwKoHin2r4U8naSmH → bc1qesxgc8msz5l9m6x9fpy9ukd2398w63jv5jt3fc
tx 73d640a8f9542071…
Split payment
12.86800000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
34htaopBLxrpZVtZp1Rn5BAQQLt6oJ2gNi 0.00009954 BTC Trace this branch
HOP 2 · 2021-01-15 16:21 UTC
bc1qesxgc8msz5l9m6x9fpy9ukd2398w63jv5jt3fc → bc1qgnwcv3stdseg99swge0w4ksprmeltwyvq6ga4a
tx e53c8aef1e766dbb…
Low Risk
12.86785766 BTC
Continue from here
HOP 3 · 2022-03-27 09:25 UTC
bc1qgnwcv3stdseg99swge0w4ksprmeltwyvq6ga4a → bc1q9kgvnu4qh3pkhcr7amrdjjtpmydjuugjes4a2x
tx c18ac20fb4c878cb…
Split payment
6.79453500 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qyrsu4ss46phtl5qqktccr8as50pe28pfe4pd28 6.07328000 BTC Trace this branch
HOP 4 · 2022-03-28 11:07 UTC
bc1q9kgvnu4qh3pkhcr7amrdjjtpmydjuugjes4a2x → bc1qa4yq02tarppeh09rvchl2fku0w94zv0g4xs5dy
tx 6e6c34441fdee312…
Low Risk
6.79452400 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.