Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
10.61000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1q8ff3lrudpdkuvm3ehq6e27nczm393q9f4ydlgt Known family: Karakurt
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-01-10 21:29 UTC
bc1q8ff3lrudpdkuvm3ehq6e27nczm393q9f4ydlgt → 3Gyrh3T4kVgwKLY4zUXSsbtCzFHLxZFJS3
tx 455a6568b6e444b1…
Split payment
10.61000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qstv3v22yfjfzlg0d7pxefway7uz70fkd9t7asp 1.00835944 BTC Trace this branch
HOP 2 · 2022-01-10 22:12 UTC
3Gyrh3T4kVgwKLY4zUXSsbtCzFHLxZFJS3 → 3Avc13EXSqP8yKeNaYRC4ijY9TR42akitE
tx ae86000f5f60e246…
Split payment
10.45212305 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
17Timp3eH4kbjeEZgGx9QYxpCPUWaMuYMm 0.15424103 BTC Trace this branch
19mYovugybX2ZFS6GSTNBCbduA9XLXiL7M 0.00359984 BTC Trace this branch
HOP 3 · 2022-01-10 23:13 UTC
3Avc13EXSqP8yKeNaYRC4ijY9TR42akitE → 3M7NzD9R9LUoD7KZ1PVx5Hsxwrz1dZjdze
tx 95a25a7e2f05a595…
Low Risk
10.45192305 BTC
Continue from here
HOP 4 · 2022-01-11 09:34 UTC
3M7NzD9R9LUoD7KZ1PVx5Hsxwrz1dZjdze → bc1qljmf3pqmlv70awukxt8cw3nhwzr8y509fefs7lzd6sttwy227g7qr74c74
tx a41af57587414010…
Low Risk
10.45172305 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.