Extracted

• • Target

    file.exe

  • Size

    1.9MB

  • MD5

    85a5e1cf0fe1fd7647a3aea9c9bfc899

  • SHA1

    c834a3b50c982dfc91fd5bd2451ce1dbe0ac4c58

  • SHA256

    c4e0c474010d9ecdcef21ad9d656c28ad11e89c6a213d015692c2424e7e75773

  • SHA512

    80ef2f871887e7bf76e9df9edf6f1b941e9f566b9a69afebe4c0d37f6592e620788b074ad469085136f03bedcebac93d20bda18a581c767faf43975818514290

  • SSDEEP

    49152:fyXUsF6XUSHfAp6AR2hlSTmnowstL/8A2:fwiUSHpPkTkwL/8H

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2