Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
50.00000000 BTC
Hops Traced
4
Flagged Hops
2
High Risk Hops
0
Starting Address
14Q5xgBHAkWxDVrnHautcm4PPGmy5cfw6b Known family: BlackCat
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2024-03-03 18:34 UTC
14Q5xgBHAkWxDVrnHautcm4PPGmy5cfw6b → 1HgvFM2ruW9Pys8eYL8bp1v1xnT9JY6AL5
tx 45cd1479e907e618…
Low Risk
50.00000000 BTC
Continue from here
HOP 2 · 2024-04-06 08:48 UTC
1HgvFM2ruW9Pys8eYL8bp1v1xnT9JY6AL5 → 39Z1SNuAteEMrM4WFDouz3vAUBiqxoMjhL
tx 7a91670fbd30c945…
Split payment
25.00000000 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
1NTpb1EAmDK4wdSpjf3PJVoVpSbFYHVujQ 24.99994200 BTC Trace this branch
HOP 3 · 2024-04-06 09:05 UTC
39Z1SNuAteEMrM4WFDouz3vAUBiqxoMjhL → 385t54y2RnTWMifubkZEeQwWCUnBvbahQo
tx 9b8975fcf34388ac…
Split payment
1.97678036 BTC
Continue from here
This spend also paid 13 other addresses — not followed above, since the walk only continues down the largest branch:
3MYJvkqk2XM41v9gXsc8srnDZwvfJx9anP 1.97583923 BTC Trace this branch
39KUnoWsEXAW6BiVU6AdVDdhE7YwaWTkRC 1.96433925 BTC Trace this branch
338rd3TVTZPYZb2c9adEKwRpYc45LaLSGW 1.95265812 BTC Trace this branch
3Jsq13ZzL86BZVQ87sbM2PgBKErsHUN76c 1.94428016 BTC Trace this branch
3NTFoG1t54fseM9rUECwfpzu8tALfUkqMa 1.92925092 BTC Trace this branch
3G5MTZ3dT9esk3x2t4JKsLzGkK3AN6p1yh 1.89280979 BTC Trace this branch
3DdSe9rQMDnK5X5ZAwP4GCXMgj6PEixr9S 1.87827569 BTC Trace this branch
3EPk6PtyUTh2acw9guuAYpu7Qcn7bQELHL 1.87342704 BTC Trace this branch
+ 5 more addresses not shown
HOP 4 · 2024-04-06 09:21 UTC
385t54y2RnTWMifubkZEeQwWCUnBvbahQo → 3HDDRUPzb8X7bnXyNsXZyxvby5gPs4qYtH
tx b80953c85a475097…
Low Risk
24.54250364 BTC
Continue from here
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.