`1HDMJ42anvW97ib2awZkzSQsCjR7uxLD79`

1HDMJ42anvW97ib2awZkzSQsCjR7uxLD79 is a cryptocurrency wallet address that one published source reports in connection with Lazarus Group activity, which public reporting attributes to North Korea (DPRK). It is cited here from Group-IB. The report is dated 2021-04-14.

wallet address Lazarus Group MATCHED IN SOURCE

Listed as Bitcoin

First seen 2021-04-14 · last seen 2021-04-14

Source

…to one of supposed CoinPayments.net addresses (3A6BbxFAYGj4zgcbBUatLeVxvqSDV4nQfV) and a large part of the funds was sent to 1HDMJ42anvW97ib2awZkzSQsCjR7uxLD79, which was one of source addresses during the main withdrawal of the stolen funds. The address 1Gf8U7UQEJvMXW5k3jtgFATWUmQXVyHkJt used in…
Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog — Group-IB · under “ANALYSIS OF OUTGOING BTC TRANSACTIONS” · published 2021-04-14 · pulled 2026-09-11

Find this indicator in the index, or see every cryptocurrency wallet address this site holds under Cryptocurrency wallet addresses in the browse listing.

Related indicators

Cited by the same report: Lazarus BTC Changer. What is JavaScript Sniffer? | Group-IB Blog

Group-IB lists 6 other indicators in this source.