2/8 Yobitへ多額送金

(1) Yobit
Yobitに的を絞ったのでしょうか。多額送金がありました。
NC4C6PSUW5CLTDT5SXAGJDQJGZNESKFK5MCN77OG (犯人)
↓100,000XEM @2018-02-07 22:08:24
NA6OMO3K2NXTVXUWH7UIM4KRXSVHNKA4DEYCSV4H (中継者F)
↓18.074036XEM
↓1,807.403677XEM
↓2,321.880404XEM
NAJEBORIU6IOO76FSONDJ6GZ3A7COQ2GNE26T2LC (中継者H)
↓1,825XEM
↓2,322XEM @2018-02-07 23:48:30
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)
メッセージはea151cb217640c2df31

その後、別の中継者を介して送金。
NC4C6PSUW5CLTDT5SXAGJDQJGZNESKFK5MCN77OG (犯人)
↓100,000XEM @2018-02-07 23:51:30
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)
↓2,951.611701XEM
↓3,694.782472XEM
↓4,602.107008XEM
↓5,730.751852XEM
↓7,142.378596XEM
↓8,564.441852XEM
↓10,245.352168XEM
↓12,202.216361XEM
↓14,207.819871XEM
↓171.773678XEM
↓9,395.621093XEM
↓11,265.276209XEM
↓13,096.756488XEM
↓15,206.864646XEM
↓178.010138XEM
↓190.54567XEM
↓9,258.899326XEM
↓10,509.383544XEM
↓11,139.87788XEM
↓11,864.038671XEM
↓12,746.693706XEM
↓13,796.733886XEM
↓14,802.660496XEM
↓16,524.996621XEM
↓21,226.509743XEM @2018-02-08 19:38:01
NAJEBORIU6IOO76FSONDJ6GZ3A7COQ2GNE26T2LC (中継者H)
↓2,951XEM
↓3,695XEM
↓4600XEM
↓5,732XEM
↓7,143XEM
↓8,564XEM
↓10,245XEM
↓12,200XEM
↓14,210XEM
↓171XEM
↓9,396XEM
↓11,265XEM
↓13,096XEM
↓15,207XEM
↓177XEM
↓191XEM
↓9,259XEM
↓10,500XEM
↓11,149XEM
↓11,864XEM
↓12,747XEM
↓13,796XEM
↓14,803XEM
↓16,525XEM
↓21,226XEM @2018-02-08 19:39:13
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)
メッセージは同じくea151cb217640c2df31
なお中継者Hへの送金と、中継者HからYobitへの送金は交互に行われています。

また、別のルートも出現。
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)
↓1.250541XEM @2018-02-08 00:54:01
↓0.779473XEM
↓168.805385XEM
↓201.614228XEM
↓235.556285XEM
↓274.560286XEM
↓321.993884XEM
↓372.739571XEM
↓431.24443XEM
↓489.909723XEM
↓592.808707XEM
↓698.117658XEM
↓778.765769XEM
↓870.138395XEM
↓1,019.25169XEM
↓1,223.242062XEM
↓1,466.894612XEM
↓1,780.22932XEM
↓2,096.677779XEM
↓2,361.560987XEM
↓2,727.743307XEM
↓3,036.970874XEM
↓3,572.526319XEM
↓4,259.637373XEM
↓4,581.294473XEM
↓4,772.970994XEM
↓5,329.066433XEM
↓6,141.756844XEM
↓6,854.129607XEM
↓8,026.373457XEM
↓9,350.677646XEM
↓10,686.311007XEM @2018-02-08 21:54:01
NCMNWHCFEFKCIQYR4AF2X2265OT5EKTXOGRZ6I2J (中継者I)
↓1.15XEM
↓169XEM
↓201XEM
↓236XEM
↓274.9XEM
↓321XEM
↓373XEM
↓431XEM
↓489XEM
↓594XEM
↓698XEM
↓778XEM
↓870XEM
↓1,019XEM
↓1,224XEM
↓1,466XEM
↓1,781XEM
↓2,096XEM
↓2,362XEM
↓2,727XEM
↓3,037XEM
↓3,573XEM
↓4,259XEM
↓4,581XEM
↓4,773XEM
↓5,329XEM
↓6,142XEM
↓6,854XEM
↓8,026XEM
↓9,351XEM
↓10,686XEM @2018-02-08 21:57:38
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)

さらに別ルート。
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)
↓936.214078XEM @2018-02-08 13:48:01
↓1.019288XEM (次の送金のミスタイプ?)
↓1,019.288267XEM
↓1,101.81863XEM
↓1,164.915396XEM
↓1,243.385022XEM
↓1,375.140522XEM
↓1,532.195026XEM
↓1,629.689343XEM
↓1,809.848661XEM
↓2,058.116541XEM
↓2,394.39286XEM
↓2,753.701852XEM @2018-02-08 22:04:01
NDUZU7FEF5XXAE3DT4UTCTYQQHYK2ZJLCRCASP4I (中継者J)
↓936XEM
↓1,020XEM
↓1,100XEM
↓1,165XEM
↓1,243XEM
↓1,376XEM
↓1,531XEM
↓1,630XEM
↓1,810XEM
↓2,057XEM
↓2,395XEM
↓2,754XEM @2018-02-08 22:08:03
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)

さらにさらに。どんどん増えていきます。
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)
↓5,069.50355XEM @2018-02-08 15:38:01
↓…
↓16,211.041684XEM
↓11,672.754878XEM @2018-02-08 22:08:01
NACPIG2TG5FS6EUFX3IEXROXQG3N6ERMLLASBV64 (中継者K)
↓5068.3XEM @2018-02-08 15:44:46
↓…
↓27,883.64XEM @2018-02-08 22:11:49
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)

NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)
↓31,807.212797XEM @2018-02-08 20:34:01
NDGB5Q333NYCBFYMIYBDVKO4B3BGY64T5HTGVOZ7 (中継者L)
↓31,804XEM @2018-02-08 20:37:43
NBRT3YQTVHLTYBDUXH2HHURI5KCYDWRWJ63YWIGG (Yobit)

かなり小刻みに送られていて送金額の増分にある程度規則性がありそうなので一見botかと思いきや、途中間違ったり(送金先を自分のアドレスにしていたり、0XEMしか送っていなかったり、送金額の桁を間違えたり)、休憩したりしているので、手動っぽい感じがします。

なお、途中、資金補充もありました。

NDZZJBH6JZPYSWRPRYHALLWMITWHOYTQGXR53HAW (犯人/1億C)
↓250,000XEM @2018-02-08 06:09:23
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575(中継者G)

NC4C6PSUW5CLTDT5SXAGJDQJGZNESKFK5MCN77OG (犯人)
↓240,762.12329XEM @2018-02-08 17:30:56
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)

NA6OMO3K2NXTVXUWH7UIM4KRXSVHNKA4DEYCSV4H (中継者F)
↓59,159.832824XEM @2018-02-08 21:03:13
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)

NBVWA3S2PAXPXT7X52HKEKNDVNMBG3ZATYED6MIY (中継者Z)
↓290,498.638XEM @2018-02-08 22:25:36
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)

NC4C6PSUW5CLTDT5SXAGJDQJGZNESKFK5MCN77OG (犯人)
↓1,000XEM @2018-02-05 02:20:57
ND3BDYXAYOY7M5XR2EIRPAG43Z3LSDGQXJOPY4BK
↓999.95XEM @2018-02-08 22:16:23
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)

NCM6WE7SJFDVTLSPTMZGBUZUETDYINITILS3DCIZ (犯人)
↓1,000XEM @2018-01-31 21:20:29
NCP733VKRNJ2P2MU2Y7SHZ2OBGHMDY5A4KBY5HPH
↓999.95XEM @2018-02-08 22:32:19
NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575 (中継者G)

このGをハブとして資金を集結させてますね。

(2) その他の取引所
意図はわかりませんが、Yobitへの送金の合間に少額が他の取引所に中継者Hから送られていました。

↓0.1XEM @2018-02-08 02:10:15
NBZMQO7ZPBYNBDUR7F75MAKA2S3DHDCIFG775N3D (Poloniex) メッセージa8f1009b95500f23

↓0.1XEM @2018-02-08 04:15:00
NDKIDQOVCGN463JUSAUJ3YKGLVVLSZV3ZKA46JQC (Livecoin) メッセージ27c73b93c8305cc7

↓0.4XEM @2018-02-08 06:38:39
NDGQY7EKY5PLCPNKEXWHIWH3Y62DO4NQIEXE7I4V (Exrates?) メッセージe4f51a8b

また、別の口座からもありました。

NCVPRFXRIDDF7PXKBF6CKKI76H3M5H5TSXT5K575
↓31.405684XEM @2018-02-08 20:14:01
NAJ6DH3RXJCF24FKDF6YW5QOQ7VPCMA63YCUGEIA
↓10/10/2XEM
NBX3QKZJV2UPO3NJ5ULTFW2V5EE4N2I5N2REX7PO (HitBTC)
NBQ73BYLVGMO7L2WFG2VVOJHOBWWJKW7D3V7UE4E (Cryptopia)
NDKIDQOVCGN463JUSAUJ3YKGLVVLSZV3ZKA46JQC (Livecoin)

(3) 個人への送金？
その背後で個人のウォレットと思われるアドレスにも送金。
NC4C6PSUW5CLTDT5SXAGJDQJGZNESKFK5MCN77OG (犯人)
↓328,191.01221XEM @2018-02-08 14:10:51
NDYM3NGGZLMKNCMUQ36VSU3NWWTFHIHXRHREQQRX
↓1,000XEM @2018-02-08 21:08:54
NA5VFZNYEE4H76RE5Z7RHZC5XDRUAOBDF7JNGWKW