Overview

overview

10

Static

static

8

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab
  • Size 6.1MB
  • Sample221204-19rlqabc66
  • SHA256 e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
laplasstealervmprotect

Malware Config

Extracted

Family

  • laplas

C2

  • clipper.guru

Attributes
  • api_key

    7ee57b1f6d4aff08f9755119b18cf0754b677addcb6a3063066112b10a357a8e

Targets

    • Target
      e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab
    • Size 6.1MB
    • SHA256 e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    laplasstealervmprotect

    • Laplas Clipper

      Laplas is a crypto wallet stealer with two variants written in Golang and C#.

      stealerlaplas

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks