General

  • Target

    e7e7fe6048eef775573b39818c5813e1bf86f33c6e489c29a8d4906e4ff51c7d

  • Size

    1.9MB

  • Sample

    230313-yq35asbh36

  • MD5

    82e4d38ea66e43007f2ca9ca5d5d6a7b

  • SHA1

    50332596c6d5ca258929c74fd83a5dc6c6f2f962

  • SHA256

    e7e7fe6048eef775573b39818c5813e1bf86f33c6e489c29a8d4906e4ff51c7d

  • SHA512

    d3206535822f72f38c2fec278d61f72e655b69943cebda0b5d8d2722d4b47434c90cb209b61393c1da487ff91869bc0070dc25bb7afc94bdf11916f5cbbc3ad4

  • SSDEEP

    24576:znO4wdIL2USx8FAouHiRhMGmmd9H+lY+d2c6sKEn/nHFTKtPcqlyYomhKYz0SBph:DOyLohbKhMaPYlK0nHWCvUpoD+

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      e7e7fe6048eef775573b39818c5813e1bf86f33c6e489c29a8d4906e4ff51c7d

    • Size

      1.9MB

    • MD5

      82e4d38ea66e43007f2ca9ca5d5d6a7b

    • SHA1

      50332596c6d5ca258929c74fd83a5dc6c6f2f962

    • SHA256

      e7e7fe6048eef775573b39818c5813e1bf86f33c6e489c29a8d4906e4ff51c7d

    • SHA512

      d3206535822f72f38c2fec278d61f72e655b69943cebda0b5d8d2722d4b47434c90cb209b61393c1da487ff91869bc0070dc25bb7afc94bdf11916f5cbbc3ad4

    • SSDEEP

      24576:znO4wdIL2USx8FAouHiRhMGmmd9H+lY+d2c6sKEn/nHFTKtPcqlyYomhKYz0SBph:DOyLohbKhMaPYlK0nHWCvUpoD+

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks