Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.20027900 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qy0wlctg06k4hdjhwf3gjnjz2m9zatpxz9ll2f3
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-05-29 10:45 UTC
bc1qy0wlctg06k4hdjhwf3gjnjz2m9zatpxz9ll2f3 → bc1qwng9mec3ak6mty95f2432huqxuwsvlfnn7hwrs
Split payment
1.20027900 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1G76spXEoY6ZmucUSa2CxHpaZEM782Wapz 1.00000000 BTC Trace this branch
HOP 2 · 2021-05-29 10:59 UTC
bc1qwng9mec3ak6mty95f2432huqxuwsvlfnn7hwrs → 1MV6z34rBQr4Ps7zvDgxMBaxvFNoS3bpyu
Split payment
1.20000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qy4njs4vhcqan3mmelvp0mvq4e8xyqj23p629zs 0.00647700 BTC Trace this branch
HOP 3 · 2021-12-17 15:39 UTC
1MV6z34rBQr4Ps7zvDgxMBaxvFNoS3bpyu → 17mJEMx4F62ZGdqywP69bU1zfnDzCnxxff
Low Risk
176.31556686 BTC
HOP 4 · 2022-11-22 07:18 UTC
17mJEMx4F62ZGdqywP69bU1zfnDzCnxxff → 18CEpKv9Mp9fQ6PP7Pihron6NBKCniafkp
Split payment
691.23268801 BTC
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
32nGq1H1TNZEG3rL859dUz2kBt7LLmSjQL 0.47638293 BTC Trace this branch
36JqXhqj3CWpqgHesbbb2uGBd5Rn7hom2H 0.06276300 BTC Trace this branch
3PXB54UEmudArAPaYtdnFmQi3guvB8bkF7 0.00100000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.