Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
73.14986994 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
1
Starting Address
3MGt926W19vRqEY5SkhCZrsqT38MYyNnyb
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-10-22 22:35 UTC
3MGt926W19vRqEY5SkhCZrsqT38MYyNnyb → 3N7zs6DdiPYVu3oBZByVcoryPuKmq3yeGc
Split payment
73.14986994 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1FxcoCd8SQns9o9bb5opKeCGTD3TdPxfET 13.30000000 BTC Trace this branch
HOP 2 · 2020-10-22 22:45 UTC
3N7zs6DdiPYVu3oBZByVcoryPuKmq3yeGc → 1PYwNUuiJ3SQFqmNsA9Ys3HVaYtGG6fe8G
Split payment
46.55000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3CYKdUKyqShqvHcuaF8jamXgEAhuzFFpqk 26.59964179 BTC Trace this branch
HOP 3 · 2020-02-06 16:05 UTC
1PYwNUuiJ3SQFqmNsA9Ys3HVaYtGG6fe8G → 15ZiXV59pa6zq91T9uBda7SKifFrJo59eF
High Risk
41.69992452 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
12HQDsicffSBaYdJ6BhnE22sfjTESmmzKx OFAC 31.80000000 BTC Trace this branch
HOP 4 · 2020-02-12 15:50 UTC
15ZiXV59pa6zq91T9uBda7SKifFrJo59eF → 3Gs1Zh5wLg7bCehedXNjBqb6DB7rV84Ehf
Split payment
22.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1NxjeKECAs2tTJrWtYBYvJh8kWV3nqQKrP 19.69981991 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.