Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
5.38605006 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
3K98HBSA21KUPJczHLotn7SZgavhK8Goe6
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-12-26 09:08 UTC
3K98HBSA21KUPJczHLotn7SZgavhK8Goe6 → 3Ep3fKwhykdh6YFkWATS1zWxM8QZwUnyKf
tx 3351c8d9fa206b7b…
Split payment
5.38605006 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3F5BTKZevWkmBRrwJXE9PxTZm2xNMGxVNV 5.00000000 BTC Trace this branch
HOP 2 · 2021-01-11 07:36 UTC
3Ep3fKwhykdh6YFkWATS1zWxM8QZwUnyKf → 11FfmCYyg34pq9CMQHtcKXfZ7TAMLqfbw
tx 5a8f56964f5c4914…
Split payment
10.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3Ce8cDQy5c8Apj1WXEQndBZqmtYHdCPzeu 2.38520873 BTC Trace this branch
HOP 3 · 2023-06-14 18:42 UTC
11FfmCYyg34pq9CMQHtcKXfZ7TAMLqfbw → 14o5ywJJmLPJe8egNo7a5fSdtEgarkus33
tx 2e2d7725223fb80a…
Low Risk
104.84137819 BTC
Continue from here
HOP 4 · 2023-10-01 08:33 UTC
14o5ywJJmLPJe8egNo7a5fSdtEgarkus33 → 1ENWYLQZJRAZGtwBmoWrhmTtDUtJ5LseVj
tx 3bc9aa0809f25c2f…
Low Risk
0.88482581 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.