`1KYjujKXcXw9mPrCr5HadY2DWCmo6aMrY9`

1KYjujKXcXw9mPrCr5HadY2DWCmo6aMrY9 is a cryptocurrency wallet address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB. The report is dated 2021-04-14.

wallet address Lazarus Group MATCHED IN SOURCE

Listed as Bitcoin

First seen 2021-04-14 · last seen 2021-04-14

Source

…these three transfers from the addresses used by the attackers, there was a fourth BTC address, which was the source in transaction a929c7 1KYjujKXcXw9mPrCr5HadY2DWCmo6aMrY9 .…
Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog — Group-IB · under “ANALYSIS OF OUTGOING BTC TRANSACTIONS” · published 2021-04-14 · pulled 2026-09-11

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog

Group-IB lists 6 other indicators in this source.