Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
23.19310875 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
3CTFQHBENZYbTKe8X6c9EwEVccoTeAjGJf
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-08-03 13:35 UTC
3CTFQHBENZYbTKe8X6c9EwEVccoTeAjGJf → bc1qs6g75lf4xqxgt8fdykz3mkjrp3rh6thzst7skh
Split payment
23.19310875 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q5207tudvz04ypyy3wq4ku2jskfcv4d454gxjl0 19.00000000 BTC Trace this branch
HOP 2 · 2020-08-03 22:36 UTC
bc1qs6g75lf4xqxgt8fdykz3mkjrp3rh6thzst7skh → bc1q5mdmmaftmx69977lqhllkektvtgscd57z3fjrs
Split payment
20.24421073 BTC
This spend also paid 161 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q8fllecerh822atqau9vjra8mk7zqcz3ru4a09c 2.88852489 BTC Trace this branch
bc1ql5pz0qgtgjgmf2phtxnvhyq3zv4j6cz64jkdsy 1.52164816 BTC Trace this branch
bc1quwr8pvzmkp38rc8tzky6wgc47h7zn02mnujw38 1.52164816 BTC Trace this branch
bc1qsauw43alv3cl2eq5ullncn5u0p73ry64txzpjt 1.52164816 BTC Trace this branch
bc1qfamgjclvm97c9eg2wet232fzdnnpdw8tuawt9l 0.76082408 BTC Trace this branch
bc1q2xn2m8d9u8rnxtdj2zfjweg3quxtx2m9ydwfef 0.76082408 BTC Trace this branch
bc1q8dspusq7xycm4e7zhjgjvxdl2y2y323qw08dam 0.76082408 BTC Trace this branch
bc1qspsvaxzf85qhxqs4c7qc0hpme2wctpc6z475n5 0.76082408 BTC Trace this branch
+ 153 more addresses not shown
HOP 3 · 2020-08-03 23:33 UTC
bc1q5mdmmaftmx69977lqhllkektvtgscd57z3fjrs → bc1qddztk7tdenzzlsr7n8n8ave3kgc69644gzs7p2
Split payment
14.25521355 BTC
This spend also paid 182 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qfp5xqn20ym48gfv8su69edufnkdmdf5wfegnpx 3.04153312 BTC Trace this branch
bc1qlc74zug89j9qlufghqxgfsvwhqzdt4d6vvsruy 3.04153312 BTC Trace this branch
bc1q55wxhc07cxfer48c6wee2alnh7ln0ktcstlv3y 1.61801639 BTC Trace this branch
bc1q54ednxu0ekhwqzzx70tq4pyuhsx02we57x4lup 1.52076656 BTC Trace this branch
bc1qxp5l72hcdtx7lwfaxlzg7jymqzeq3n284r5al5 1.52076656 BTC Trace this branch
bc1q2n08tc3w7thvuc2qdlfsmw8hc8hapzrxwwvq7l 1.52076656 BTC Trace this branch
bc1q4jwz2ak3hkp6asgs85m6y702ah480g36aeats0 1.37989676 BTC Trace this branch
bc1quvz4skvwvpxw8hh53fey6rusqpx8pfphq7wc50 0.76038328 BTC Trace this branch
+ 174 more addresses not shown
HOP 4 · 2020-08-04 03:51 UTC
bc1qddztk7tdenzzlsr7n8n8ave3kgc69644gzs7p2 → bc1q7cdk3qtc977ws2j7k0ehw72j8t5459fflg3ypp
Split payment
8.26643843 BTC
This spend also paid 126 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qlr8lju5d308n4y6cug72tcew7dmuka0cudwhfe 3.04153312 BTC Trace this branch
bc1qaldxz62mx90pypv4vsufp0nwf64wnlxkyzmhxy 3.04153312 BTC Trace this branch
bc1qk80uakt5avydvftg9w93qm92glynl2gz924rxp 1.52076656 BTC Trace this branch
bc1q3kvehwh408a3setpwulevqxy0cz6w56f3u0rmr 1.52076656 BTC Trace this branch
bc1qnp0dw38n24h7gtx5fn2ss39k5dd4vsdlrjpej6 1.52076656 BTC Trace this branch
bc1qnugey5ctzam07hv93ecglyre5sd368e7czjch8 0.76038328 BTC Trace this branch
bc1qkgnnpxzmvk09c7520cl4kg85m9rvv7nrgmqep9 0.76038328 BTC Trace this branch
bc1qqdx4fwa8qr0lyefdrxharlezc8ty9lf6qn7gn7 0.76038328 BTC Trace this branch
+ 118 more addresses not shown
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.