General

  • Target

    c08c7434a53f9cb22c7b02014eb3d7f98bbd526a186608247fbf733bc0506d9c

  • Size

    1.9MB

  • Sample

    230313-2y7n8see4v

  • MD5

    6c4e5bce8690ff55bd4acd9beb72cad2

  • SHA1

    96e49ef7ba67bcc1546d54a9670dd9c28c4d873a

  • SHA256

    c08c7434a53f9cb22c7b02014eb3d7f98bbd526a186608247fbf733bc0506d9c

  • SHA512

    0aa1ea742e610ff12ccfd845d9dff51fd8ebe3fd46ee42f46ae201ff309a4a61630904668552f5e3cd0b4c4069cc3aa8c1a5bff4bd89b6c553eb1de0b4d9f580

  • SSDEEP

    49152:1IZyEOousfSNG7BstWgOrMTK5JTGa2jnMsf85X+nu:1IUEO6fiG7Bst1GmK/Tcd

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      c08c7434a53f9cb22c7b02014eb3d7f98bbd526a186608247fbf733bc0506d9c

    • Size

      1.9MB

    • MD5

      6c4e5bce8690ff55bd4acd9beb72cad2

    • SHA1

      96e49ef7ba67bcc1546d54a9670dd9c28c4d873a

    • SHA256

      c08c7434a53f9cb22c7b02014eb3d7f98bbd526a186608247fbf733bc0506d9c

    • SHA512

      0aa1ea742e610ff12ccfd845d9dff51fd8ebe3fd46ee42f46ae201ff309a4a61630904668552f5e3cd0b4c4069cc3aa8c1a5bff4bd89b6c553eb1de0b4d9f580

    • SSDEEP

      49152:1IZyEOousfSNG7BstWgOrMTK5JTGa2jnMsf85X+nu:1IUEO6fiG7Bst1GmK/Tcd

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks