Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
20.00000000 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
1N6f6LJ9NJcr1FYCzHzTJkWv8Rnp5Y6NfV
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-07-04 13:07 UTC
1N6f6LJ9NJcr1FYCzHzTJkWv8Rnp5Y6NfV → 37hqHaA9Stw2oZxRZuyA8Bu7LBYyega4uv
tx 4a2b6e20a1d391b1…
Split payment
20.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1979YhRwsb8nxRi25e2gUqmySfwDnGscYY 0.25971978 BTC Trace this branch
HOP 2 · 2021-07-04 13:58 UTC
37hqHaA9Stw2oZxRZuyA8Bu7LBYyega4uv → 19iqYbeATe4RxghQZJnYVFU4mjUUu76EA6
tx aefff641a3a65134…
Low Risk
12796.70402378 BTC
Continue from here
HOP 3 · 2023-04-12 04:11 UTC
19iqYbeATe4RxghQZJnYVFU4mjUUu76EA6 → 3PepdrPTcn6qLkBZ3AKo9693MhTAhPZ8kV
tx a9e2c9b5afdc2cad…
Low Risk
407.53898504 BTC
Continue from here
HOP 4 · 2025-02-28 18:48 UTC
3PepdrPTcn6qLkBZ3AKo9693MhTAhPZ8kV → bc1qq7un9r4evla5v6nq6zdtrx6n3zfn5wv4akyt8gfez0vvcy7qq9usu0zr5x
tx 18906ec2cc0d9acb…
Low Risk
437.50360000 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.