General

  • Target

    414b33f7e5445ce67dbd9bf9ad85084d2b02762606ae8b5dfe37b4123154fc08

  • Size

    1.9MB

  • Sample

    230314-d2mapsda79

  • MD5

    fa89d4571f7073e7926843d8a16df438

  • SHA1

    c6754b3313c44c255a062a5dd12aae32e19dbbba

  • SHA256

    414b33f7e5445ce67dbd9bf9ad85084d2b02762606ae8b5dfe37b4123154fc08

  • SHA512

    a2625101eef9864136841490473ee8acad14b3418b90bfc468561791ce603d916b35c24a379e3386f32e07047e2e6cfa79d66aef1b186e1b65aeb180a5bc8e3e

  • SSDEEP

    49152:plVxrXOWGkryuAaDewDw/+d1q/oENauIsocOHBp:pl7DLDrKOea6LN7RWr

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      414b33f7e5445ce67dbd9bf9ad85084d2b02762606ae8b5dfe37b4123154fc08

    • Size

      1.9MB

    • MD5

      fa89d4571f7073e7926843d8a16df438

    • SHA1

      c6754b3313c44c255a062a5dd12aae32e19dbbba

    • SHA256

      414b33f7e5445ce67dbd9bf9ad85084d2b02762606ae8b5dfe37b4123154fc08

    • SHA512

      a2625101eef9864136841490473ee8acad14b3418b90bfc468561791ce603d916b35c24a379e3386f32e07047e2e6cfa79d66aef1b186e1b65aeb180a5bc8e3e

    • SSDEEP

      49152:plVxrXOWGkryuAaDewDw/+d1q/oENauIsocOHBp:pl7DLDrKOea6LN7RWr

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks