Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
99.89965019 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
1J2ktmERAXHTeh42MoZLRYrVNNW2BMVFAc
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-03-04 09:50 UTC
1J2ktmERAXHTeh42MoZLRYrVNNW2BMVFAc → 15qRSEVgsiASdVwHEi3yQPk6VLPNGHipYE
tx 4d6167d2576fb567…
Low Risk
99.89965019 BTC
Continue from here
HOP 2 · 2021-06-22 11:09 UTC
15qRSEVgsiASdVwHEi3yQPk6VLPNGHipYE → 1FFhPgMLnWog1NL2GnxHDLs18219ok8i4U
tx c3a41f012edae6fa…
Low Risk
113.05892510 BTC
Continue from here
HOP 3 · 2022-11-20 04:59 UTC
1FFhPgMLnWog1NL2GnxHDLs18219ok8i4U → 18ywDzGd91XJZUBwLpPCC8igoH9Xeh4Fqw
tx 2903d8e3f488ea58…
Split payment
873.86262908 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
16s48G4FojC1QuxpWrj9Wjz2jRj3iEuTeQ 1.88360000 BTC Trace this branch
bc1qd2m26s9n753alkyxksvalyrw47jgzklqs09zgj 0.07960000 BTC Trace this branch
3F7nj2GE5cY2m3vUy8b1EGS21N9towdzow 0.00557602 BTC Trace this branch
HOP 4 · 2022-09-20 17:50 UTC
18ywDzGd91XJZUBwLpPCC8igoH9Xeh4Fqw → 13ZgxVPQL3h4JA3LFqk6ydQiQq4CVe79K7
tx 4f475a266c185df1…
Split payment
9876.80510388 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
1CdJ9cVVbvzcQQH6pGmiPY3LY9XmAeTSPE 8.65188589 BTC Trace this branch
bc1qe5t5xtdgc9nk3p5zfrcra4xmhhv6cp77uyxjuj 0.52205236 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.