Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
5.16167546 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qw77uss7stz7y7kkzz7qz9gt7xk7tfet8k30xax Known family: Karakurt
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-11-30 21:52 UTC
bc1qw77uss7stz7y7kkzz7qz9gt7xk7tfet8k30xax → bc1qa2k6gf9ls5g2u8s63zne83hxaqxdmpdzpen5fl
Low Risk
5.16167546 BTC
HOP 2 · 2021-11-30 22:47 UTC
bc1qa2k6gf9ls5g2u8s63zne83hxaqxdmpdzpen5fl → bc1q08cn5p95zwmldrzfsjnteu46tz66xac5x6jnjt
Split payment
2.58086098 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qze29gnyd9rjvndam52dmqa6y7x7ze47t7zkds0 2.58078854 BTC Trace this branch
HOP 3 · 2021-12-06 01:17 UTC
bc1q08cn5p95zwmldrzfsjnteu46tz66xac5x6jnjt → bc1qzlqf9gedrfwjcnqmygx7tsuf65aq7q357gufxl
Split payment
2.55018754 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q0v0nzmffrwx8v4f0wa99sws6za0rp2qwtpjg7u 0.03066089 BTC Trace this branch
HOP 4 · 2021-12-06 01:28 UTC
bc1qzlqf9gedrfwjcnqmygx7tsuf65aq7q357gufxl → bc1qaqvsa50rtd47an5fdmg7uq9x3yvwdcgzu9yyv6
Split payment
2.52967714 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qgktadm74ephhfrntes3dmt3d0krwutvzeepn4l 0.02049785 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.