← All actor clusters

AS29073

AS29073 is an autonomous system number that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist. The report is dated 2018-08-23.

asn Lazarus Group MATCHED IN SOURCE

First seen 2018-08-23 · last seen 2018-08-23

Source

• …AS174 COGENT-174 Additional attacker’s server from telemetry 80.82.64.91: Seychelles Incrediserve Ltd AS29073 185.142.239.173: Netherlands Blackhost Ltd.…

  Operation AppleJeus: Lazarus hits cryptocurrency exchange with fake installer and macOS malware | Securelist — Kaspersky Securelist · under “Infrastructure” · published 2018-08-23 · pulled 2026-09-11

Find this indicator in the index, or see every autonomous system number this site holds under Autonomous system numbers in the browse listing.

Related indicators

Cited by the same report: Operation AppleJeus: Lazarus hits cryptocurrency exchange with fake installer and macOS malware | Securelist

Kaspersky Securelist lists 20 other indicators in this source. 12 are shown, chosen across types.

• AS174 autonomous system number
• AS3741 autonomous system number
• johnbroox200@gmail.com email address
• 0bdb652bbe15942e866083f29fb6dd62 file hash
• 14b6d24873f19332701177208f85e776 file hash
• 4126e1f34cf282c354e17587bb6e8da3 file hash
• 6cb34af551b3fb63df6c9b86900cf044 file hash
• 81c3a3c5a0129477b59397173fdc0b01 file hash
• 185.142.236.226 IP address
• 185.142.239.173 IP address
• 196.38.48.121 IP address
• 80.82.64.91 IP address

All 21 indicators from this source