Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
35.17363191 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
bc1qaqeu4s7drfpxdrt505fe8qcraymplh7eh7339g6jfh30mvpz304qcrlfhf
blockchain.com Wallet view
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2023-11-10 13:31 UTC
bc1qaqeu4s7drfpxdrt505fe8qcraymplh7eh7339g6jfh30mvpz304qcrlfhf → bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d
tx 8a7624c9e60f3d51…
Split payment
35.17363191 BTC
Continue from here
This spend also paid 18 other addresses — not followed above, since the walk only continues down the largest branch:
1PUGTMAwZqt5CG2cgGXD2Jf57kUaGzjrpz 24.00000000 BTC Trace this branch
14FxTBkQn2EhaLDjPzTCbB1AtSZVxP1kxX 0.73359939 BTC Trace this branch
1FFAT9kprgy37JoTmjkXwPMhQwnSCPfLny 0.02528279 BTC Trace this branch
35fZaT7xyo1izzEUahsM99SMUL6pWau6PE 0.01974000 BTC Trace this branch
1NCHCaMjBtWVYcdrM6FCLH4H56Fzrmupub 0.01239899 BTC Trace this branch
bc1phy645nguh4pt2g3jmgachvsu4u83lseulc93qeqrj23caa6j7nesgmkuhj 0.01082900 BTC Trace this branch
3JqNfiQ5hvV2hgCrrKhUMT9ot7RFoWUTC2 0.00974000 BTC Trace this branch
bc1q5fgqlv5jddadwzwn7tndxy7ltrtaneyh4px2v4 0.00929022 BTC Trace this branch
+ 10 more addresses not shown
HOP 2 · 2026-09-07 06:02 UTC
bc1quhruqrghgcca950rvhtrg7cpd7u8k6svpzgzmrjy8xyukacl5lkq0r8l2d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx ed0a00cf2f53eac3…
Split payment
56.14000000 BTC
Continue from here
This spend also paid 2 other addresses — not followed above, since the walk only continues down the largest branch:
bc1q5x9p784q6jkj4w3cw56h8vejz326yrf6u4tuksgg8kjnfkpg7l5qe8kpz6 3.52000000 BTC Trace this branch
bc1qnjx7l9v53hchrngmeapjy48md4smafmhten5kg9httg5836rkxgsxu2dmz 1.72000000 BTC Trace this branch
HOP 3 · 2026-09-06 20:58 UTC
bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2 → bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d
tx f6f3d318e5af24d4…
Split payment
459.54838961 BTC
Continue from here
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qk2jypmly2um8nu7zp6e76mw9m0hsmrz453xx7qe29mygtqffq6zs0j5qe0 273.92161039 BTC Trace this branch
HOP 4 · 2026-08-29 03:14 UTC
bc1qsyp3gx0p4p4jzvekxjxkpk9vcjj37gvrlfn9ryx4jy6ne5nhu76s5xxw5d → bc1qn2cpj0hrl37wqh5q94kwrlhtj2lx8ahtw7ef5rg35tswxsqtvufqfmmrq2
tx 4d26678a62a75c8d…
Self-consolidation
499.27000000 BTC
Continue from here
Trace stopped: the largest outgoing path led back to an already-visited address (self-consolidation or a cycle), not a new counterparty.