Malware author probably uses a multitude of wallets, but the one shown in that screenshot has received a few actual payments:
https://blockchain.info/address/1HKCHx1RFhNHuF3NxLviHdrjNFzJ...
https://blockchain.info/address/1HKCHx1RFhNHuF3NxLviHdrjNFzJ...