Comment by Tegran

Malware author probably uses a multitude of wallets, but the one shown in that screenshot has received a few actual payments:

https://blockchain.info/address/1HKCHx1RFhNHuF3NxLviHdrjNFzJ...