`35dnPpcXMGEoWE1gerDoC5xS92SYCQ61y6`

35dnPpcXMGEoWE1gerDoC5xS92SYCQ61y6 is a cryptocurrency wallet address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB. The report is dated 2021-04-14.

wallet address Lazarus Group MATCHED IN SOURCE

Listed as Bitcoin

First seen 2021-04-14 · last seen 2021-04-14

Source

…We found that all stolen funds were transferred to a single address ( 35dnPpcXMGEoWE1gerDoC5xS92SYCQ61y6 ) as a result of transaction a929c7 ( https://www.blockchain.com/btc/tx/a929c7d3b7ae58eb5b833460017016267f7ac66cbd16ad0 b4c4d4c9b3f50406a…
Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog — Group-IB · under “ANALYSIS OF OUTGOING BTC TRANSACTIONS” · published 2021-04-14 · pulled 2026-09-11

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog

Group-IB lists 6 other indicators in this source.