Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.98144013 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qaaz323jup4td49950n2huqmq78sgkmufvvqfjhwjz48l6ayhau2shcmlk3
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-03 22:34 UTC
bc1qaaz323jup4td49950n2huqmq78sgkmufvvqfjhwjz48l6ayhau2shcmlk3 → bc1qhjjnsyv3hgag30pyas3pjg06n8h5907z30tjsx77676h33q4828s8c69zx
tx a91cc6e3798f6465…
Split payment
0.98144013 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qj7dcwqe9ylap0xjjacvu9wffdy6az4650r2jde 0.02593145 BTC Trace this branch
bc1qcem06nv322nz4a5vlmznx72wyd65z0uzyf5mlw 0.00920988 BTC Trace this branch
1PAg8oMZHavEut2MgrYVHHhK2RWg1Xf6ZY 0.00497707 BTC Trace this branch
bc1qr0hlwj780ywsnpvm76ck6dps59a0vd6zwed2hj 0.00104401 BTC Trace this branch
HOP 2 · 2026-09-03 23:59 UTC
bc1qhjjnsyv3hgag30pyas3pjg06n8h5907z30tjsx77676h33q4828s8c69zx → bc1q5hesj27nulgyua9njal7cg86p35n2z00gwl4j266l46qvjlftpksgd7cq7
tx 20277e4caa6c2b81…
Split payment
0.90408827 BTC
Continue from here
This spend also paid 4 other addresses — not followed above, since the walk only continues down the largest branch:
1AZexp1Y2aLdPGcNf3a7srsA6Fha3N837 0.06508468 BTC Trace this branch
bc1qv4zhjqrgamcengesqw525s4tz5q79pctcfjhdn 0.01082497 BTC Trace this branch
bc1qmxaejvg6ngnw24pws973jvaxdlkxl8y78ls6j8 0.00086598 BTC Trace this branch
bc1q9ny08kgxhr3nn8clydkhfda009kes0es8r9jzy 0.00057018 BTC Trace this branch
HOP 3 · 2026-09-04 02:46 UTC
bc1q5hesj27nulgyua9njal7cg86p35n2z00gwl4j266l46qvjlftpksgd7cq7 → bc1q2zdtjz2gu0tjt9c6v34g3e0y9sjk5nuqn88vp8ucaq6h8j4vwt0qlc4tfz
tx 2a8cd19357cd09f1…
Split payment
0.90033984 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q4c9sqtq8e2luqplagzdlct9qka7atrzptw4xft 0.00269415 BTC Trace this branch
bc1qwfk8nhgqutphnhfmyf78293un4rt2td0szxr4s 0.00104986 BTC Trace this branch
HOP 4 · 2026-09-04 09:10 UTC
bc1q2zdtjz2gu0tjt9c6v34g3e0y9sjk5nuqn88vp8ucaq6h8j4vwt0qlc4tfz → bc1q826ezg7gvrevswxdc5dw4ld9d6crswnvyctrp3wrn3mn42u6l2eq8zjwg0
tx 1ac6ce82c79cbec4…
Split payment
0.90024915 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qyd6um4l396t2urm50met4twrdh7xczq40q80ca 0.00008689 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.