`0x3c4911847e280cb78d0d60bd6eb551642c645ae0`

0x3c4911847e280cb78d0d60bd6eb551642c645ae0 is a smart contract address that one published source reports in connection with EtherHiding activity, which no published source ties to North Korea (DPRK). It is cited here from Chollima Hunter (on-chain observation). The report is dated 2026-05-23.

DPRK link unconfirmed LevelBlue SpiderLabs ties the deployer to the PhantomPolia loader, which delivers Remus Stealer through ClickFix lures, and names no actor or state; no DPRK link is published for it. The EtherHiding tracker covers every reported EtherHiding contract and wallet, not only North Korean ones, so this value may belong to another actor.

smart contract address EtherHiding CURATED

First seen 2026-05-23 · last seen 2026-05-23

Source

Ethereum Sepolia testnet contract deployed on 2026-05-23 by 0x92f3f39c1cde5ee705820af022e2b85c4eaa43f6, the deployer of the PhantomPolia dead-drop resolvers LevelBlue SpiderLabs reports. Found by this site's hunt of 2026-10-20; it holds no value written after deployment, so no C2 is recovered from it.
Ethereum Sepolia transaction 0x8c394b7a7c174cf44d39b79a87b939ba7e59762215c68a7b756b17adaf6bace9 (deployment) — Chollima Hunter (on-chain observation) · published 2026-05-23 · pulled 2026-10-20

Find this indicator in the index, or see every smart contract address this site holds under Smart contract addresses in the browse listing.