Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
162.41551122 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qy0gz9dhhck0nwg2nm5feeufczjms7m0vyvsmss
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-11-27 15:07 UTC
bc1qy0gz9dhhck0nwg2nm5feeufczjms7m0vyvsmss → bc1qaplrk29vdla0nc80guwncd2pesjr4u9l4uyws9
Low Risk
162.41551122 BTC
HOP 2 · 2020-11-30 14:03 UTC
bc1qaplrk29vdla0nc80guwncd2pesjr4u9l4uyws9 → bc1qfdczyrdf5qp5h67x3xcafg28k8cn46a5hnxlst
Split payment
162.41513717 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3MsQFDYuuu8ArpsggZgq6FwFoXDmgL2zaR 0.00026045 BTC Trace this branch
HOP 3 · 2021-01-18 10:48 UTC
bc1qfdczyrdf5qp5h67x3xcafg28k8cn46a5hnxlst → bc1qjavzknr5sfc4gvw9nx6lcsgky9stg6ejgcumfd
Split payment
100.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qa306rqamu46xjw7k9khuvecpczu8n3z4q2z86m 62.41496000 BTC Trace this branch
HOP 4 · 2021-03-04 11:42 UTC
bc1qjavzknr5sfc4gvw9nx6lcsgky9stg6ejgcumfd → bc1q6cuwayau7pl7eglzmjsd6uqrya76nzzr97enps
Split payment
74.99975100 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qm6mxdthxglk0qfr2d5z0ju2tqy5t4je2n3kkr9 25.00000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.