Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
1.34833534 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qmj80fx9wa4jajrp3y20cxg5thfhuegk48k7scg
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-11-13 21:04 UTC
bc1qmj80fx9wa4jajrp3y20cxg5thfhuegk48k7scg → bc1qjxtamkphe6vjds3at3t59xwvfp7jr39905u80m
Low Risk
1.34833534 BTC
HOP 2 · 2022-11-13 21:04 UTC
bc1qjxtamkphe6vjds3at3t59xwvfp7jr39905u80m → bc1qmtg6l80g5ft0gh4ed75djdj20y9n0qupa9p324
Low Risk
1.34824690 BTC
HOP 3 · 2022-11-13 21:40 UTC
bc1qmtg6l80g5ft0gh4ed75djdj20y9n0qupa9p324 → 3N2qq1vCS5sA1Nn1qG9K9kuDZ8R2nq6BDC
Low Risk
3.82402762 BTC
HOP 4 · 2023-01-30 20:20 UTC
3N2qq1vCS5sA1Nn1qG9K9kuDZ8R2nq6BDC → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
Split payment
292.67204550 BTC
This spend also paid 7 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qa36dk2nll0yd20gqvyp7vksktn468w7ang54sr 4.55382817 BTC Trace this branch
1Hb268SN21Kv6wtuTWaQpsaox6pJBGNU5b 0.02699895 BTC Trace this branch
1Jbr1uYV2Gsj56b74rvkhwDTm5T2ENAXRL 0.02180000 BTC Trace this branch
bc1qa9vdn4pj6rv799tpcp4kvm2y34e0ggkujtcp8y 0.01100000 BTC Trace this branch
bc1q8s65xm46nl4jkqg5s04723ezfan8cqutlr7m89 0.00259028 BTC Trace this branch
3M8V9ebytfe8UCwVY7fTnj5SRmrcdzhhmm 0.00100000 BTC Trace this branch
bc1q9esaww3v3ptvh8k4rs7ysql4kyzvpzheef2r2jaunz22v6j744dsc0xazj 0.00100000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.