Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Ransom Payment Tracer

Inspired by secworkspace/ransomware-payment-tracer.

First Hop Amount
3.77276887 BTC
Hops Traced
4
Flagged Hops
4
High Risk Hops
0
Starting Address
3EVCR1AU5tVWy9vDh29KLp4eSvsXPqXBaY
Fund Flow Trace
Clean hop Self-consolidation / fan-out branch OFAC-listed / known ransomware family Click any node to continue tracing from it · scroll to zoom · drag to pan
Hop Detail
HOP 1 · 2024-04-06 11:22 UTC
3EVCR1AU5tVWy9vDh29KLp4eSvsXPqXBaY → 3HgMSjmgYue96LvLc44UpRkJwCydjffLrb
Split payment
3.77276887 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qfjs2g03xtr98mz5vcas0q2522sthc2m0m7pctt 1.00996970 BTC Trace this branch
HOP 2 · 2024-04-06 11:38 UTC
3HgMSjmgYue96LvLc44UpRkJwCydjffLrb → bc1qw8j465zr8x7xu5dpl5zngkluwrw2nc4w7rjnse
Split payment
2.02000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3D4EitcJhGR79VTRGZkxmEpJpVNkvXtgsN 1.75268512 BTC Trace this branch
HOP 3 · 2024-04-06 14:00 UTC
bc1qw8j465zr8x7xu5dpl5zngkluwrw2nc4w7rjnse → bc1qjyrj3dtds8jn0x4zzj39emmt6sfgghfrxdata9
Split payment
1.01996400 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
3P2YAbqe352bRYrbem8RqKKwjv7SjDiqfp 1.00000000 BTC Trace this branch
HOP 4 · 2024-04-09 13:53 UTC
bc1qjyrj3dtds8jn0x4zzj39emmt6sfgghfrxdata9 → 1M8vXFUeGeGwFTPRkwDtHETdd5RucvxGX4
Split payment
1.00000000 BTC
This spend also paid 1 other address — not followed above, since the walk only continues down the largest branch:
bc1qw5pj9dkxse4rfjf87q77vzx35ytfruvwfggdnp 0.01988900 BTC Trace this branch
Reached the 4-hop limit for this run — continue from the last hop above to keep walking.