Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
4.16685390 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpgu Known family: DarkSide
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-02-15 22:41 UTC
bc1qjhdw0582hu8sl2l56dyu9l4rk366hhu7j5xpgu → bc1qudcmt52433gqfak8g6m0leylu2xn8jhqggm6s5
tx 51f7dc39a81c16c0…
Split payment
4.16685390 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qr9kqwkfdyssvv6t36vz88308yswdy422tynsdu 1.04142452 BTC Trace this branch
HOP 2 · 2021-02-05 17:27 UTC
bc1qudcmt52433gqfak8g6m0leylu2xn8jhqggm6s5 → 3BdVQMMkR5ueGtJSuEPRLeLouwPy9z9GSf
tx d75c4dd485b11b8f…
Low Risk
5.06283264 BTC
Continue from here
HOP 3 · 2021-02-24 08:07 UTC
3BdVQMMkR5ueGtJSuEPRLeLouwPy9z9GSf → 16Nkms4WWf5WdAqTCw69iZ1JSv4HaXRQ8Y
tx bddd67682e5550a4…
Low Risk
6.25250760 BTC
Continue from here
HOP 4 · 2021-03-04 06:42 UTC
16Nkms4WWf5WdAqTCw69iZ1JSv4HaXRQ8Y → 1J2ktmERAXHTeh42MoZLRYrVNNW2BMVFAc
tx c8836d9dda8d4c9c…
Split payment
99.99000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1BFmdNeiG81Zm8rVW3sEhmpsjA259bXmUk 0.45149080 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.