Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
10.49632560 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qlzqu0a09lslhlw5ljapdtcmghjuavh0fjhq6cv
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-02-27 21:15 UTC
bc1qlzqu0a09lslhlw5ljapdtcmghjuavh0fjhq6cv → 177tEZgnozWe8HFHT7DZ6XseNzguyydrNR
tx 831b500caebb5223…
Split payment
10.49632560 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qhc6lcpjq68qdmwxsce6kqxhf7z9cj88hhylm5w 6.84974148 BTC Trace this branch
HOP 2 · 2020-02-27 21:15 UTC
177tEZgnozWe8HFHT7DZ6XseNzguyydrNR → 3Kpazyk3m4G59sfcbobL7w9vrFnV3qJp6d
tx b38434fadf269573…
Low Risk
7.53720000 BTC
Continue from here
HOP 3 · 2020-02-27 21:25 UTC
3Kpazyk3m4G59sfcbobL7w9vrFnV3qJp6d → 1BtSE7AXX5RuRRcnbhiM3qBwMhEYwxqBsm
tx 97037b1af229e02e…
Split payment
7.53709440 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3Bj2jVXAdkdCiPgnGuqxjhQEdZAVDo3hdf 3.12673423 BTC Trace this branch
HOP 4 · 2023-07-17 04:59 UTC
1BtSE7AXX5RuRRcnbhiM3qBwMhEYwxqBsm → bc1qm34lsc65zpw79lxes69zkqmk6ee3ewf0j77s3h
tx 01dcaf392cd00184…
Low Risk
101.22396192 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.