Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
0.90033984 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1q5hesj27nulgyua9njal7cg86p35n2z00gwl4j266l46qvjlftpksgd7cq7
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2026-09-04 02:46 UTC
bc1q5hesj27nulgyua9njal7cg86p35n2z00gwl4j266l46qvjlftpksgd7cq7 → bc1q2zdtjz2gu0tjt9c6v34g3e0y9sjk5nuqn88vp8ucaq6h8j4vwt0qlc4tfz
tx 2a8cd19357cd09f1…
Split payment
0.90033984 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q4c9sqtq8e2luqplagzdlct9qka7atrzptw4xft 0.00269415 BTC Trace this branch
bc1qwfk8nhgqutphnhfmyf78293un4rt2td0szxr4s 0.00104986 BTC Trace this branch
HOP 2 · 2026-09-04 09:10 UTC
bc1q2zdtjz2gu0tjt9c6v34g3e0y9sjk5nuqn88vp8ucaq6h8j4vwt0qlc4tfz → bc1q826ezg7gvrevswxdc5dw4ld9d6crswnvyctrp3wrn3mn42u6l2eq8zjwg0
tx 1ac6ce82c79cbec4…
Split payment
0.90024915 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qyd6um4l396t2urm50met4twrdh7xczq40q80ca 0.00008689 BTC Trace this branch
HOP 3 · 2026-09-04 12:34 UTC
bc1q826ezg7gvrevswxdc5dw4ld9d6crswnvyctrp3wrn3mn42u6l2eq8zjwg0 → bc1qhs6emkc8usea50l2m9vg40qlcs0emglpwtwqprgrxx62zl7hk34s2sfl3x
tx 6947143629eb990b…
Split payment
0.89772903 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
bc1qskpu4rwrsadwew7qhqet9s30tw3jt95t2q0wxd 0.00130019 BTC Trace this branch
1JwVDpTZYkZRCKaarNptrMHUuj4x17Xas5 0.00086765 BTC Trace this branch
bc1qcmtcz2laswdsxv9tzkqrwtadvw94d0q8z7k43v 0.00034718 BTC Trace this branch
HOP 4 · 2026-09-04 14:11 UTC
bc1qhs6emkc8usea50l2m9vg40qlcs0emglpwtwqprgrxx62zl7hk34s2sfl3x → bc1q0zlzs7y66jsjv3xts65w52zp8lsu89g6ma40qsq2cwnsvwwhtmjsnsvg2u
tx e1699ab06d517521…
Split payment
0.86551408 BTC
Continue from here
This spend also paid 3 other addresses — not followed above, since the walk only continues down the largest branch:
15s2SnvKTdoCthGfyVu6CBZGKVoBks2bA9 0.02544696 BTC Trace this branch
bc1q4xwk8nszstydx8h58jegq778pv2hxtdhf3wrax 0.00354671 BTC Trace this branch
33NomXTUNkwR9zr5a42gWCQ9aENSc6ABkx 0.00321616 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.