Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
6.25250760 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
3BdVQMMkR5ueGtJSuEPRLeLouwPy9z9GSf
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-02-24 08:07 UTC
3BdVQMMkR5ueGtJSuEPRLeLouwPy9z9GSf → 16Nkms4WWf5WdAqTCw69iZ1JSv4HaXRQ8Y
tx bddd67682e5550a4…
Low Risk
6.25250760 BTC
Continue from here
HOP 2 · 2021-03-04 06:42 UTC
16Nkms4WWf5WdAqTCw69iZ1JSv4HaXRQ8Y → 1J2ktmERAXHTeh42MoZLRYrVNNW2BMVFAc
tx c8836d9dda8d4c9c…
Split payment
99.99000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1BFmdNeiG81Zm8rVW3sEhmpsjA259bXmUk 0.45149080 BTC Trace this branch
HOP 3 · 2021-03-04 09:50 UTC
1J2ktmERAXHTeh42MoZLRYrVNNW2BMVFAc → 15qRSEVgsiASdVwHEi3yQPk6VLPNGHipYE
tx 4d6167d2576fb567…
Low Risk
99.89965019 BTC
Continue from here
HOP 4 · 2021-06-22 11:09 UTC
15qRSEVgsiASdVwHEi3yQPk6VLPNGHipYE → 1FFhPgMLnWog1NL2GnxHDLs18219ok8i4U
tx c3a41f012edae6fa…
Low Risk
113.05892510 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.