Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
38.09654108 BTC
Hops Traced
4
Flagged Hops
3
High Risk Hops
0
Starting Address
3HfT3ivrRaxHmQ7GC2vUWPHGyKE6qPHfZL
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2020-11-14 13:06 UTC
3HfT3ivrRaxHmQ7GC2vUWPHGyKE6qPHfZL → 1Jaeq29NgFuk2qJKuaPzBWioHLpJ6NRi2m
Split payment
38.09654108 BTC
This spend also paid 11 other addresses — not followed above, since the walk only continues down the largest branch:
17qLEdWcWbtkBi2XLvVVuL4mCau7rhzn47 0.08091195 BTC Trace this branch
1EwgFfBdHCmMNWA2MeEs147Dwnhwirji7s 0.06500000 BTC Trace this branch
1PCA98YH5n9jNpg7sD7djDFotgMuL2ZNyC 0.06419999 BTC Trace this branch
3EfWgLNWRaTfJBecNx7cx4WcVtadXsGCrP 0.04000000 BTC Trace this branch
1ChtWbK9L6x6MiNKtuNHL9TKkXytXnr6aH 0.03353989 BTC Trace this branch
3DWGZ8WbaxedSYpvtgznevFBgy8eHmdwxy 0.01208349 BTC Trace this branch
3C7tKZke4393ajBkmSQLfLnW6F5svYeKaG 0.01021947 BTC Trace this branch
1NV9aHtPm9b34atWfCzUat9BoUX6mh1oFn 0.00986840 BTC Trace this branch
+ 3 more addresses not shown
HOP 2 · 2020-12-03 09:23 UTC
1Jaeq29NgFuk2qJKuaPzBWioHLpJ6NRi2m → 3GYkf8cpTQmwHCCP2CN6uuDzhdAd464gqy
Low Risk
116.96198460 BTC
HOP 3 · 2020-12-07 07:23 UTC
3GYkf8cpTQmwHCCP2CN6uuDzhdAd464gqy → 3Nu4o9mtNu8BGNMtN9U6NrNidUNP9B37R1
Split payment
111.16186436 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3ErfoxHN7S5vbz2jk1fnTxVcvbkpD9AxZw 5.80000000 BTC Trace this branch
HOP 4 · 2020-12-17 11:25 UTC
3Nu4o9mtNu8BGNMtN9U6NrNidUNP9B37R1 → 39aqhUVUdiWDqxyokBA9SfGhpVKMWxRsKc
Split payment
111.11167677 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1JxXMEbYX6juuEK7QPe6CxGXywQ91ZB5mZ 0.05000000 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.