← All actor clusters

70.42.52.80

70.42.52.80 is an IP address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from McAfee. The report is dated 2018-02-12.

ip address Lazarus Group MATCHED IN SOURCE

First seen 2018-02-12 · last seen 2018-02-12

Network

Looked up 2026-09-21 at ip-api.com. A hosting range is not evidence on its own.

Source

• …HTTP response for job description document This implant (csrss.exe) compiled January 15, 2018 contacts an IP address 70.42.52.80 which resolves to deltaemis.com.…

  Lazarus Resurfaces, Targets Global Banks and Bitcoin Users — McAfee · under “Analysis” · published 2018-02-12 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Lazarus Resurfaces, Targets Global Banks and Bitcoin Users

McAfee lists 11 other indicators in this source.

• 1dd8eba55b16b90f7e8055edca6f4957efb3e1cd file hash
• 535f212b320df049ae8b8ebe0a4f93e3bd25ed79 file hash
• 7e70793c1ca82006775a0cac2bd75cc9ada37d7c file hash
• a79488b114f57bd3d8a7fa29e7647e2281ce21f6 file hash
• afb2595ce1ecf0fdb9631752e32f0e32be3d51bb file hash
• bdaedb14723c6c8a4688cc8fc1cfe668 file hash
• d4c93b85ffe88ddd552860b148831026 file hash
• dc06b737ce6ada23b4d179d81dc7d910a7dbfdde file hash
• e8faa68daf62fbe2e10b3bac775cce5a3bb2999e file hash
• 210.122.7.129 IP address
• 221.164.168.185 IP address