Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
2.47455000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
bc1qx8dy95uagyxrk2sfqq3z76nzkdrr38k5tj55lg
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-06-08 18:41 UTC
bc1qx8dy95uagyxrk2sfqq3z76nzkdrr38k5tj55lg → bc1q48qat88km52g02e78hkufkafz65l4s9v45sux4
Split payment
2.47455000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qwsn6w039aguv4jpu7ktgmxzre8szj4x6ese4sd 1.33243700 BTC Trace this branch
HOP 2 · 2022-06-12 11:22 UTC
bc1q48qat88km52g02e78hkufkafz65l4s9v45sux4 → bc1qmaguluvhf7547gplus40wumyhkuep068s2tnre
Split payment
1.50000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qypprmq2hjhrz8rwwqw5w0v44p5z7gp8kz43sxp 0.97454700 BTC Trace this branch
HOP 3 · 2022-04-20 16:26 UTC
bc1qmaguluvhf7547gplus40wumyhkuep068s2tnre → bc1q084xhj6cspm23g9lpvkz7h6le0sle8gfr4yv20
Low Risk
2.00000000 BTC
HOP 4 · 2022-04-20 21:54 UTC
bc1q084xhj6cspm23g9lpvkz7h6le0sle8gfr4yv20 → 1BdAZqoEcDsDWgDoro3ehAuudZqEMU7bWU
Low Risk
6.99100000 BTC
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.