General

  • Target

    7e961ae0a792a9fd1fa75ff30ca63059fef689a8e6a0f072080700733ca59da6

  • Size

    1.9MB

  • Sample

    230313-m37sgaca9w

  • MD5

    1c71a0cb34e85cf9461c68184baf0184

  • SHA1

    c5d11e9427090056134b2ed54fb2025e18a02b7a

  • SHA256

    7e961ae0a792a9fd1fa75ff30ca63059fef689a8e6a0f072080700733ca59da6

  • SHA512

    ab499996e30906d4b901c4accddbcef82a365dd2a7bc4b8d1d6a96f8cc55ac97e2bf7d0cc5b2b668204bb9c4f00e3066e0cbeeacc95e55821813e7026d14b6e9

  • SSDEEP

    24576:sjqc7wu8LQn7kCwBCmWbmFLdSvvxoAwBx0cCsKvPZhGmQX0NRocvOKYhC8t7nuBc:Wqk7kW6FwydBZCz3XGzmO4OR4+i

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      7e961ae0a792a9fd1fa75ff30ca63059fef689a8e6a0f072080700733ca59da6

    • Size

      1.9MB

    • MD5

      1c71a0cb34e85cf9461c68184baf0184

    • SHA1

      c5d11e9427090056134b2ed54fb2025e18a02b7a

    • SHA256

      7e961ae0a792a9fd1fa75ff30ca63059fef689a8e6a0f072080700733ca59da6

    • SHA512

      ab499996e30906d4b901c4accddbcef82a365dd2a7bc4b8d1d6a96f8cc55ac97e2bf7d0cc5b2b668204bb9c4f00e3066e0cbeeacc95e55821813e7026d14b6e9

    • SSDEEP

      24576:sjqc7wu8LQn7kCwBCmWbmFLdSvvxoAwBx0cCsKvPZhGmQX0NRocvOKYhC8t7nuBc:Wqk7kW6FwydBZCz3XGzmO4OR4+i

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks