Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.81518853 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qwdzczn75q8hn5jn4waer2vv8kucr9arglw2gae
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2021-11-15 18:54 UTC
bc1qwdzczn75q8hn5jn4waer2vv8kucr9arglw2gae → bc1q7m6tlc2lpmcy3z4qy2p220kuzkrn04lwg7jpvp
Split payment
3.81518853 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1ql5sm93mxkaad7c785mcwhnepuddhdetu4qvdeq 0.07830895 BTC Trace this branch
HOP 2 · 2021-11-15 19:10 UTC
bc1q7m6tlc2lpmcy3z4qy2p220kuzkrn04lwg7jpvp → bc1q3w9e0tys5qujhzv5f4lgfq9wknsxdg3w4anrjw
Split payment
3.65819060 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qfvh5enulk6pd2flfuzydxn349ctk2e35dfqttv 0.15698016 BTC Trace this branch
HOP 3 · 2021-11-16 15:42 UTC
bc1q3w9e0tys5qujhzv5f4lgfq9wknsxdg3w4anrjw → bc1qmnxw8gvxh07f5u9eyeph90ffhmvy3v0c03yaxx
Split payment
3.65078309 BTC
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
36MNm4eHq2nutbpMjR97biENqoiyPoPxws 0.00410135 BTC Trace this branch
1CxzEGvCjB9wRXjbXxdrQBPNGniMJMt1h5 0.00328213 BTC Trace this branch
HOP 4 · 2021-11-16 15:49 UTC
bc1qmnxw8gvxh07f5u9eyeph90ffhmvy3v0c03yaxx → bc1qnref0d0twtyr0d3y4ptzls43gfql86t09jdqu2
Split payment
3.48785554 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1CxzEGvCjB9wRXjbXxdrQBPNGniMJMt1h5 0.16291696 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.