General

  • Target

    autorun.exe

  • Size

    5.4MB

  • Sample

    230222-snretscc46

  • MD5

    610a076f83218b51b01a24e9c8eba3ae

  • SHA1

    7956cbd49823b35362f2244a350078f066873e65

  • SHA256

    fc06eb8ba18242f5a2dfb76d80ca1fe30e8df12f7c5f3d0092eb3d7fd4d51f08

  • SHA512

    bed36d4f8663e1c3e9b877367b64a2bf0ae95a86da0c02d74b29872137f370f8419359be2244e009039705f64d68eb9792dee7dd4ed1456bc54789c1ca82c707

  • SSDEEP

    98304:InGmlwPwuBvk1wu8JZfB7QJYfUbNM9VlE/V3VydE18wkcUrL5iKroh9Q4QGn7MO:InGmlgwgM18JPvCIU3V/+rLr29QUMO

Malware Config

Extracted

Family

laplas

C2

clipper.guru

Attributes
  • api_key

    e967005093020788056c9d94da04435883edc18212f0de012679a229f024fdb6

Targets

    • Target

      autorun.exe

    • Size

      5.4MB

    • MD5

      610a076f83218b51b01a24e9c8eba3ae

    • SHA1

      7956cbd49823b35362f2244a350078f066873e65

    • SHA256

      fc06eb8ba18242f5a2dfb76d80ca1fe30e8df12f7c5f3d0092eb3d7fd4d51f08

    • SHA512

      bed36d4f8663e1c3e9b877367b64a2bf0ae95a86da0c02d74b29872137f370f8419359be2244e009039705f64d68eb9792dee7dd4ed1456bc54789c1ca82c707

    • SSDEEP

      98304:InGmlwPwuBvk1wu8JZfB7QJYfUbNM9VlE/V3VydE18wkcUrL5iKroh9Q4QGn7MO:InGmlgwgM18JPvCIU3V/+rLr29QUMO

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Matrix

Tasks