Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
112.24000000 BTC
Hops Traced
2
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 21:03 UTC
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 → bc1q88zfnu6wjqqpxyaksmc3mcgakwaqt7z68tkw0jx87gdn25fhfkuqy23psm
tx 4a2ea0e73306515f…
Low Risk
112.24000000 BTC
Continue from here
HOP 2 · 2026-09-04 03:11 UTC
bc1q88zfnu6wjqqpxyaksmc3mcgakwaqt7z68tkw0jx87gdn25fhfkuqy23psm → bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6
tx 5cab6adccaab3c27…
Self-consolidation
57.61000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.