Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.44100000 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
bc1qwh9qhy62z7whrme404c7lq8ct3aaaxslsfut4t
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-02-19 13:54 UTC
bc1qwh9qhy62z7whrme404c7lq8ct3aaaxslsfut4t → bc1qu2w8s30qfc9rlffnzr673a3k26ffsjy3hpv4zl
tx 5c6a6ff4eee19e74…
Split payment
0.44100000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1q402a0tdaj46w9qrpzfvfwucmdz6gd9pputqyuj 0.11815376 BTC Trace this branch
HOP 2 · 2022-03-02 18:41 UTC
bc1qu2w8s30qfc9rlffnzr673a3k26ffsjy3hpv4zl → bc1q6mfx4x0dhfef2qjlhkw8jw9w9wsw2lx09dlv8h
tx f169d2e7565b53d3…
Split payment
4.13033344 BTC
Continue from here
This spend also paid 126 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qxmn5xyk3gpm6wf9x2k4tx76t00trcdhan2uw9g 0.86096976 BTC Trace this branch
bc1qufemr57u42mkg7tv37frctz5uhy5vp754ael3z 0.86096976 BTC Trace this branch
bc1q8kv478rej8lnksxjrnthu2fqfcpwj0cnu7y4tg 0.43048488 BTC Trace this branch
bc1qnxrrwtmj5rphra3ves3eyyzn426fjav5dtmeza 0.43048488 BTC Trace this branch
bc1q50g466kqxuclzkfyhlqdd4fwzu7p6v3vj64frk 0.43048488 BTC Trace this branch
bc1qqsdaeqe23v7xhn28tspcc8s6n3kky5smssstqr 0.21524244 BTC Trace this branch
bc1q7gf76ssfxpkhugyn7s5qtgqfspyfp6phrq3r5v 0.21524244 BTC Trace this branch
bc1qvrhzrs9qcqf5uxakf73kz0vu5v4rgyxwhvz3xx 0.21524244 BTC Trace this branch
+ 118 more addresses not shown
HOP 3 · 2022-03-03 10:29 UTC
bc1q6mfx4x0dhfef2qjlhkw8jw9w9wsw2lx09dlv8h → bc1qd8zyjsv9qf6kctyhzj44e98rhqjeg0nh5qew3q
tx eff0abba9518e89c…
Split payment
1.72172160 BTC
Continue from here
This spend also paid 65 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5xxftd956asy6kgjn4f2s99em4xudw0g758xwr 1.72172160 BTC Trace this branch
bc1qk52e4859q985rskvzhevc0k0fu4wtwtxjpfths 0.98377728 BTC Trace this branch
bc1qkjetxsukr3efwasv2mzgrc0z0cekva6lzcqlff 0.86086080 BTC Trace this branch
bc1qclea49zkxemm5msgue76h5p2226emwys7v7mgu 0.86086080 BTC Trace this branch
bc1qkpzt72vsdn2tyjt5clx6hva95tfrtl8uzfxq22 0.79415504 BTC Trace this branch
bc1qpuujzescral222mwvm9mja4t0x95uset06s3lx 0.43043040 BTC Trace this branch
bc1qnw6yuutjldhktfrvkvfc794usq8jxu2r4l3r6h 0.43043040 BTC Trace this branch
bc1q4akmkyz00ujcg4pqy73eaezq022nccvtgkwqj0 0.37454402 BTC Trace this branch
+ 57 more addresses not shown
HOP 4 · 2022-03-03 11:52 UTC
bc1qd8zyjsv9qf6kctyhzj44e98rhqjeg0nh5qew3q → 36AnwPBoArcmQb5jwnWVRbyLfzsDoT2c7E
tx 35d1cfa8b7edcd80…
Low Risk
1.72169607 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.