Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.55000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qqp73up3xff6jz267n7vm22kd4p952y0mhcd9c8 Known family: Karakurt
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-10-19 19:43 UTC
bc1qqp73up3xff6jz267n7vm22kd4p952y0mhcd9c8 → bc1qk7qkfcy8zavpexwyakwcz2fjx7ufmrc0dsrcn4
tx ca16ad6ab0093784…
Split payment
0.55000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qj3cmtcff3rla5xwkw685pgcr6gluv03a697z85 0.02250700 BTC Trace this branch
HOP 2 · 2021-10-14 20:53 UTC
bc1qk7qkfcy8zavpexwyakwcz2fjx7ufmrc0dsrcn4 → bc1qwmu39pfh302k44e0x6r9unlexqwf58xdn0e37n
tx 29226d11d88a625f…
Low Risk
7.99998680 BTC
Continue from here
HOP 3 · 2021-10-15 10:30 UTC
bc1qwmu39pfh302k44e0x6r9unlexqwf58xdn0e37n → bc1qtd5qsa0wakpse7s87e8hkh59eycv35ngd4jw27
tx da0617c17e36d795…
Split payment
8.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qlft3tkpmp76kh9y2g987vfnkeclnh5l5p22rcw 0.29992500 BTC Trace this branch
HOP 4 · 2021-10-15 11:10 UTC
bc1qtd5qsa0wakpse7s87e8hkh59eycv35ngd4jw27 → 33esY55JizyGPF8Pe1L2x4a2WqEfoRmpaR
tx 1766079badbb6db0…
Low Risk
4.89983426 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.