Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.71673614 BTC
Hops Traced
4
Flagged Hops
1
High Risk Hops
0
Starting Address
bc1qexjp0lmk9gs7trk65f3zrzdvcz8t6q2zj9r74u
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2022-07-14 19:32 UTC
bc1qexjp0lmk9gs7trk65f3zrzdvcz8t6q2zj9r74u → 38p88DDS1CCqFrg4aNozqR915nGXVUpFmR
tx 12a3ec99282ad866…
Low Risk
0.71673614 BTC
Continue from here
HOP 2 · 2022-07-07 21:25 UTC
38p88DDS1CCqFrg4aNozqR915nGXVUpFmR → bc1qhhhc9lmfwhfnl47n7eqfxcacsamnvjyel7tlgm
tx 3d5136c9a9121728…
Low Risk
10.46735686 BTC
Continue from here
HOP 3 · 2022-09-18 18:50 UTC
bc1qhhhc9lmfwhfnl47n7eqfxcacsamnvjyel7tlgm → bc1qrrxzfj604nsrckml59fw6uf6wrj5k0hp5vl4zn
tx 9c40c4b40d3c70a6…
Low Risk
119.63986231 BTC
Continue from here
HOP 4 · 2023-03-18 05:16 UTC
bc1qrrxzfj604nsrckml59fw6uf6wrj5k0hp5vl4zn → bc1qd6zjtk9j5dnx2kte04neg6zrqahg5ftn4awt7j
tx 40057c824e822d9e…
Split payment
118.91206389 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qvnd3k6dl48aj6qy46fm47dazvgx7vk3jkgpmra 0.72774907 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.