Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
18.15236995 BTC
Hops Traced
3
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1q78q04w9eqj3pmnt4jlaecawwd3stknuvzghl0q
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-07 18:26 UTC
bc1q78q04w9eqj3pmnt4jlaecawwd3stknuvzghl0q → bc1qdfl3dfnwwvlqa5jpckh0ccwpjczh5y566c4g76
tx b16b843c4432cc9f…
Low Risk
18.15236995 BTC
Continue from here
HOP 2 · 2026-09-08 04:55 UTC
bc1qdfl3dfnwwvlqa5jpckh0ccwpjczh5y566c4g76 → bc1q8pmuc2v0cku2ty0rfxp2jyvrhv6lpsjzq9y6s8
tx ce501e00b6f75205…
Low Risk
12.50000000 BTC
Continue from here
HOP 3 · 2026-09-08 06:02 UTC
bc1q8pmuc2v0cku2ty0rfxp2jyvrhv6lpsjzq9y6s8 → bc1p8hdz32hgk0tl5cxpzp69yrvarfqg0uk86ykyve2en8v8kzwssczqmznq9w
tx a1e321747d221638…
Split payment
2.10436323 BTC
Continue from here
This spend also paid 5 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qgdsdya4jmc5qzzn6tpcdlld29wjdv5ckfs359s 0.00321020 BTC Trace this branch
bc1q0u480dxgdct7u6yyqeggder8dge7d9n7k9n3fm 0.00148598 BTC Trace this branch
bc1qygsnzmvjhx0wfpdtq6nem7w5mvl5f63584jarp 0.00112358 BTC Trace this branch
13wx8MS162r17o31zDkNTYpS9QyoFq78yG 0.00108500 BTC Trace this branch
bc1qwk4evnwrhj2nz9lf0fyma30lwv22jleuwrsmdp 0.00098267 BTC Trace this branch
Trace stopped: no further outgoing transactions from the last address.