Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
4.47994726 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV Known family: REvil / Sodinokibi
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-06-13 20:07 UTC
3HTHHMm2YwNdwEDkGc6dRyxxKvByymeVqV → 14FtTSEVWVmhdHYVvwid3d86rug9AMkaji
tx 4454ad05b6ced5c7…
Split payment
4.47994726 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3C5z824zcsZW8r8pvvkmXw6uHEBKrhsiWQ 3.19000000 BTC Trace this branch
HOP 2 · 2021-06-14 15:20 UTC
14FtTSEVWVmhdHYVvwid3d86rug9AMkaji → 1EdLW9Wc1JU3vPZM1QvocfQEQxHN6WKvPf
tx 6030162a6300acbd…
Split payment
2.23997300 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1KbujfhxTBCNAxGkJiyRPZ8fjtcowgZC5c 2.23988000 BTC Trace this branch
HOP 3 · 2021-06-23 18:39 UTC
1EdLW9Wc1JU3vPZM1QvocfQEQxHN6WKvPf → 3Btn4eiDbf7brYN2pvq5VPRq7ym2Y4MEvh
tx 279fc47c80f8d794…
Split payment
3.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1MZMedTk5iTWJMMhJrGmXjQ9K9Z8zBYdLW 0.37818600 BTC Trace this branch
HOP 4 · 2021-08-08 14:08 UTC
3Btn4eiDbf7brYN2pvq5VPRq7ym2Y4MEvh → 1DYouNSMp4mmzUZMZUuZZZirtQqGD3e1h7
tx 7cf02322bdf9802e…
Low Risk
2.00000000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.