Who Was the Killer in Knives Out?

The killer in Rian Johnson’s 2019 whodunit Knives Out was Hugh "Ransom" Drysdale, played by Chris Evans. Although Harlan Thrombey technically died by suicide, Ransom was the mastermind who manipulated the events to ensure Harlan’s death and attempted to frame the nurse, Marta Cabrera, to secure his inheritance.

The 2019 film Knives Out revitalized the classic murder mystery genre by blending traditional "whodunit" tropes with a modern, subversive structure. While the film initially leads the audience to believe they are watching a "howcatchem"—where the culprit is known and the tension comes from them being caught—it eventually circles back to a complex conspiracy. To understand who the killer was, one must look past the physical act of Harlan Thrombey’s death and examine the calculated sabotage that preceded it.

The Identity of the Culprit: Hugh "Ransom" Drysdale

Ransom Drysdale is the "black sheep" grandson of the wealthy mystery novelist Harlan Thrombey. Unlike his parents, Linda and Richard, or his aunt and uncle, Ransom is depicted as an aimless, arrogant trust-fund beneficiary who has never worked a day in his life. His role as the antagonist is hidden for the first half of the film because he is absent during the initial police interviews, only appearing later to "help" the protagonist, Marta Cabrera.

The revelation of Ransom as the killer is particularly impactful because of the character's internal knowledge of the family's dynamics. He was the only person Harlan confided in regarding his will. When Harlan told Ransom that he was being cut out of the inheritance—along with the rest of the family—Ransom’s motive shifted from simple resentment to cold-blooded desperation.

The Motive: Inheritance and the "Slayer Rule"

In the world of Knives Out, the motive is as old as the mystery genre itself: money. Harlan Thrombey had decided to leave his entire $60 million estate, including his publishing empire and his massive Gothic mansion, to his nurse and friend, Marta Cabrera.

Ransom learned of this change during a heated argument with Harlan on the night of the patriarch’s 85th birthday party. Ransom knew that if Harlan died naturally or by his own hand after the will was signed, Marta would receive everything. However, Ransom was also aware of the "Slayer Rule." This legal doctrine prevents a person from inheriting an estate if they are responsible for the death of the person from whom they are inheriting.

By framing Marta for Harlan's accidental death, Ransom intended to trigger the Slayer Rule. If Marta were found guilty of even involuntary manslaughter through medical malpractice, the inheritance would be voided, and the estate would revert to the family—and by extension, to Ransom.

How the Crime Was Committed: The Med-Swap Scheme

The brilliance of Ransom’s plan lay in its simplicity and its reliance on Marta’s supposed fallibility. Ransom was familiar with Harlan’s medical routine, knowing he required regular injections of Ketorolac (a non-opioid painkiller) and a very small, controlled dose of Morphine.

The Sabotage

Earlier on the night of the party, Ransom broke into Marta’s medical bag. He swapped the contents of the vials: he put the Morphine into the Ketorolac bottle and the Ketorolac into the Morphine bottle. He also stole the "antidote" (Naloxone) from her bag.

His expectation was that Marta, believing she was administering a standard dose of Ketorolac, would unknowingly inject Harlan with 100 milligrams of Morphine—a lethal overdose. Because the labels were swapped, she would realize her "mistake" only when she saw the labels after the fact, causing her to panic and inadvertently prove her own negligence.

The Accidental Twist

What Ransom did not account for was Marta’s professional instinct and "muscle memory." As an expert nurse, Marta subconsciously recognized the difference in the viscosity and appearance of the liquids. Without looking at the labels, she actually administered the correct medication (Ketorolac).

However, when she looked at the labels afterward, the swapped stickers made it appear as though she had given him the Morphine. Believing he was minutes away from death, Harlan—wishing to protect Marta and her undocumented mother from legal scrutiny—concocted a plan to stage his own suicide. He slit his own throat to ensure the "overdose" would never be discovered during an autopsy.

The Secondary Crime: The Murder of Fran

While Ransom’s initial plan failed to actually poison Harlan, he still had to commit a literal murder to cover his tracks. The housekeeper, Fran, had witnessed Ransom tampering with the medical bag on the night of the party. She eventually obtained a copy of the toxicology report, which showed that Harlan’s blood was clean (because Marta had instinctively given the right meds).

Fran attempted to blackmail Ransom, not realizing he was the one who had tampered with the vials. Ransom saw this as an opportunity:

1. He met Fran and injected her with a lethal dose of Morphine.
2. He burned down the medical examiner’s office to destroy the original toxicology results.
3. He sent an anonymous tip to the police to lead them to Fran’s body, intending for Marta to be caught at the scene.

Ransom’s downfall occurred when he confessed to the murder of Fran under the belief that she had survived and would testify against him. Marta, using her inability to lie without vomiting, tricked Ransom into thinking Fran was alive. When he admitted his guilt, he did so in front of Detective Benoit Blanc and the hidden police officers.

Comparison of Suspects and Motives

The strength of the film lies in how every member of the Thrombey family had a reason to want Harlan dead. This "smoke screen" of suspects protected Ransom for much of the runtime.

Benoit Blanc’s Investigation and the "Donut Hole"

Detective Benoit Blanc, portrayed by Daniel Craig, describes the case as a "donut"—a mystery with a hole in the middle. Initially, the hole is the unexplained presence of a private investigator (Blanc himself was hired by Ransom anonymously). Ransom hired Blanc because he wanted a brilliant detective to "find" the evidence of Marta’s "accidental" poisoning, which Ransom feared the local police might miss.

As the investigation progresses, the "donut hole" fills, but another hole appears. Blanc eventually realizes that the "accident" never happened. The definitive clue for Blanc was a small drop of blood on Marta's white sneaker. This indicated she was present for the throat-slitting (the suicide), but her frantic attempts to find the medication suggested she wasn't a cold-blooded killer.

Blanc’s realization that Ransom was the one who hired him was the final piece of the puzzle. Ransom's arrogance led him to believe he could control the world's greatest detective to do his dirty work.

Frequently Asked Questions

Did Marta actually kill Harlan?

No. While Marta believed she had given Harlan a lethal dose of Morphine due to Ransom swapping the labels, her professional instincts led her to administer the correct medicine (Ketorolac). Harlan died by suicide, slitting his own throat to protect Marta from what he thought was an inevitable investigation into her "mistake."

Why did Ransom hire Benoit Blanc?

Ransom hired Blanc anonymously because he was frustrated that the police ruled Harlan's death a suicide. Ransom needed the death to be ruled a murder (or accidental death caused by Marta) so that the "Slayer Rule" would kick in, stripping Marta of her inheritance and returning the money to the family.

What was the significance of the "toxicology report"?

The toxicology report was the only physical evidence that could prove Harlan had not been poisoned. Because Marta actually gave him the correct medication, his blood showed no Morphine overdose. Ransom tried to destroy this report by burning the lab, but Fran had hidden a backup copy.

Why did Ransom try to kill Marta at the end?

Once Ransom realized his plan had failed and he had been caught in a confession, he lost his composure. He grabbed a knife from Harlan’s "throne of knives" and attempted to stab Marta. In a final bit of irony, the knife he chose was a retractable stage prop, symbolizing that for all his plotting, he was never the "killer" he thought he was—except in the case of the housekeeper, Fran.

How did the "Slayer Rule" apply?

The Slayer Rule is a real legal principle. In the film, if Marta were found responsible for Harlan's death, she would be legally barred from inheriting his estate. Ransom’s entire scheme was a "legal heist" designed to use the law to steal the inheritance back from Marta.

Final Recommendation

For those who enjoyed the intricate plotting of Knives Out, the best next step is to re-watch the film with the knowledge of Ransom's guilt. The "hidden in plain sight" clues—such as the dogs barking at Ransom in the distance during the early flashback scenes—become much more apparent. Additionally, viewers should explore the sequel, Glass Onion: A Knives Out Mystery, which features Benoit Blanc solving a different but equally complex case involving a new cast of suspects and a distinct social commentary.