Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
8.67995780 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3QxF9A7xDiamu6fsDscbYcm2EAgoT1ZC7k
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-11-05 21:38 UTC
3QxF9A7xDiamu6fsDscbYcm2EAgoT1ZC7k → 3E5BVKJDseZDZ4Useb25B6w4AzgCZmz2cM
Split payment
8.67995780 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1GTS2eLxbYEduCEPKnLSPmwko4fKco64EC 2.00000000 BTC Trace this branch
HOP 2 · 2020-11-10 12:45 UTC
3E5BVKJDseZDZ4Useb25B6w4AzgCZmz2cM → 1GTS2eLxbYEduCEPKnLSPmwko4fKco64EC
Split payment
5.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
38Z898s1JEhEB1jJhLs8oZ5XpiMGZgUArP 3.67962180 BTC Trace this branch
HOP 3 · 2020-12-16 15:18 UTC
1GTS2eLxbYEduCEPKnLSPmwko4fKco64EC → 1N52wHoVR79PMDishab2XmRHsbekCdGquK
Split payment
60.42292050 BTC
This spend also paid 23 other addresses — not followed above, since the walk only continues down the largest branch:
1NYAd6fA2dc5xowuweFUSDRqRTEzDwk28 16.00000000 BTC Trace this branch
32V6a7K46pSb1XQNGdrmdE2wjgndVfJPet 13.00000000 BTC Trace this branch
3GjaLBmJZP4B1kmCNpgudHE9PfT9cCVKGa 2.66980000 BTC Trace this branch
1GiPCS6QtPoZ8K7sKtz37zsRaTKHZmsXpU 1.00000000 BTC Trace this branch
32V258b9Ko9LKvUpUkt8372oydVWZM1cYR 0.32284685 BTC Trace this branch
34cSbfGMNDP2y5CFyAHBUCJu8ejAWmozaS 0.23437127 BTC Trace this branch
3DqubSH9cDkPJVrMENCW51Nf5EjBoPTJYs 0.18700000 BTC Trace this branch
1HdLsrPAHQrzFzrvqesPKBsTjpiVygX5mG 0.13819707 BTC Trace this branch
+ 15 more addresses not shown
HOP 4 · 2024-06-04 19:50 UTC
1N52wHoVR79PMDishab2XmRHsbekCdGquK → 18GuvQyQ7jhz5at8Cbq7sn94tATwaoasVB
Low Risk
2928.00000000 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.