I heard that the DPRK was definitely involved, but that they involved themselves at a later point in the publicity over the attack, and that it the original attack was initiated by disparate individuals only loosely cooperating.

Not to disparage your points on the Lazarus group. I've heard the same about their sophistication. I know next to nothing about the WannaCry attack besides the tragedy of the NHS succumbing to it.