Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.97032220 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qze29gnyd9rjvndam52dmqa6y7x7ze47t7zkds0
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-12-01 12:20 UTC
bc1qze29gnyd9rjvndam52dmqa6y7x7ze47t7zkds0 → 3EQ3pydf2Gtdri7RxcxHMfGcehYBkwxpT9
tx 51846e736090bbd8…
Split payment
1.97032220 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q6fe23jallxg22kdrjefstp82442z8g7gwqphp8 0.61044263 BTC Trace this branch
HOP 2 · 2021-12-01 13:06 UTC
3EQ3pydf2Gtdri7RxcxHMfGcehYBkwxpT9 → 36jH5Tdvv3bbzbVGKk87i7JDhzPBHASyXN
tx d4593fad91621540…
Split payment
1.14143700 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3Pt6wv3pCmMAzYEUtHG1gxaWsJmLPzQ99u 0.82884868 BTC Trace this branch
HOP 3 · 2021-12-01 18:08 UTC
36jH5Tdvv3bbzbVGKk87i7JDhzPBHASyXN → 3LaJ3tTafhUET4ZndcD1tiM2mZ6ViPV55r
tx 1829c6aa11f8b2b8…
Split payment
1.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3JJTushSWDaSuVEca3Bm397w7J3dr3TSXR 0.14142231 BTC Trace this branch
HOP 4 · 2024-09-25 21:17 UTC
3LaJ3tTafhUET4ZndcD1tiM2mZ6ViPV55r → 37szLo8DZHsBhWSitK4Rpz6G8prt5Vw9Fy
tx d0057b2bbf35fd55…
Low Risk
16.25062000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.