Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.71459313 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj Known family: REvil / Sodinokibi
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-06-04 18:37 UTC
34mMCqo83wc8GeLWjSPeQE8QiY9LKnkNuj → 36MZK9yc3NrEEe9u8Ct9snnNtf88R1EJLE
Split payment
0.71459313 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
14D3kEM1TVuoGJiiR8JyGNdjrzJN9FGq5N 0.58034324 BTC Trace this branch
HOP 2 · 2021-06-08 04:14 UTC
36MZK9yc3NrEEe9u8Ct9snnNtf88R1EJLE → bc1q6n4d84ul6xrgtq8hykple8jyvszjxva8dtu5fn
Split payment
0.77152327 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qg73jtxg5ysld2n73c99zykfezpz8m38kp55wdc 0.13468791 BTC Trace this branch
HOP 3 · 2021-06-08 20:27 UTC
bc1q6n4d84ul6xrgtq8hykple8jyvszjxva8dtu5fn → bc1qlwltvwuyuw3ey5cpddhem238s4ctr3f4jgam2j
Split payment
2.66985185 BTC
This spend also paid 152 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qvvm984axxs9xlazaekpt84r7hhuvped9fzl4gz 0.77159856 BTC Trace this branch
bc1q5aawp3pcynew33tk3mwk8erz9cjfdzc2p4vpnv 0.77159856 BTC Trace this branch
bc1qa69cp3j6wntrpsduum5g9x7t9t8adgkhsf86aj 0.77159856 BTC Trace this branch
bc1qy9wyvdhauzq5zsj2l5sk8w0c6hk73n5afcg2d2 0.77159856 BTC Trace this branch
bc1qlexmh6jw5844wzs0llljay04euxfydswqj92p6 0.74763043 BTC Trace this branch
bc1q5ph5lw8saut0t4fthuhdg9gp9hdmrz44h6g4tl 0.45462921 BTC Trace this branch
bc1qgmwwjekflsyew9dzpmueecjnq62vpk23rk7nyx 0.38579928 BTC Trace this branch
bc1qh8j488hwr6jdvmhyq4q4j87fhdvh7p082952lv 0.38579928 BTC Trace this branch
+ 144 more addresses not shown
HOP 4 · 2021-06-09 00:00 UTC
bc1qlwltvwuyuw3ey5cpddhem238s4ctr3f4jgam2j → bc1qn359yyzdpj2g8pmzqyguh3ypgw35zxqdlw6rkg
Split payment
4.72965651 BTC
This spend also paid 162 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qdtn44mmgt0yptkhsjamr9xcmdey3484lp7tevn 1.22261065 BTC Trace this branch
bc1qywu9nhsh8323lu7896zytkl3g9hl8t5pvcderr 0.77159648 BTC Trace this branch
bc1qcprvlfe9deuapwlvaazhk05askl34avtlc2hkj 0.77159648 BTC Trace this branch
bc1qtyzm5vka8su9mvf2txdjt8vg2aec6zex30nkfg 0.77159648 BTC Trace this branch
bc1qzketj26zzrn3telp4sxla3zzrd2ne5gq0wgl03 0.77159648 BTC Trace this branch
bc1qvv9jzrchh7el3znccv0fqc5j6wwlzclfza5pml 0.38579824 BTC Trace this branch
bc1qj28mz0d072l3kyn38gdpx56cuvcf6fxmjeprzr 0.38579824 BTC Trace this branch
bc1qtcedfcps94shhkgmmpreuc23uauqds9yfvdadj 0.38579824 BTC Trace this branch
+ 154 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.