Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
9.99643944 BTC
Hops Traced
2
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qm77uhu9eng0d97q9z3pxmwde9n732z3kq6u6dq
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-08-24 13:30 UTC
bc1qm77uhu9eng0d97q9z3pxmwde9n732z3kq6u6dq → bc1qklqmelz4ld62wk96vux6fmpp8gmn3ry83tmvyr
Split payment
9.99643944 BTC
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qzf6lnsvq87y8py5c47smemdqzlu4cvsmqngxfe 0.24388470 BTC Trace this branch
bc1q0zxerq83jwuzu65eucxwxlgpwreyu5nuru93s6 0.00082329 BTC Trace this branch
bc1qt6ym0t95tmjf6e72ml0mvw3smxvpj54wxfnyyx 0.00044677 BTC Trace this branch
bc1q2egq2henclvjqn3fjr9qu68nfsp96hp4vv9skj 0.00028129 BTC Trace this branch
HOP 2 · 2026-09-08 14:25 UTC
bc1qklqmelz4ld62wk96vux6fmpp8gmn3ry83tmvyr → bc1qqy5wy8y3xxgjelphat9wxtuq26zl4yn5zvxl5l
Split payment
5.43910804 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q97lxtmd2za67peergt495a0eytgjp0uzt7sruc 4.55732914 BTC Trace this branch
Trace stopped: no further outgoing transactions from the last address.