General

  • Target

    e5aeb4a9784edb6431da63763693b9b6a667d43a98e26451e1bd09a946bbaf8d

  • Size

    1.8MB

  • Sample

    230314-p8sxlshd6s

  • MD5

    5820c3a3cdbbf36e0dc60bac8469ff1c

  • SHA1

    0558ab64d6197b980e56b1832bcbc724a2bc23a1

  • SHA256

    e5aeb4a9784edb6431da63763693b9b6a667d43a98e26451e1bd09a946bbaf8d

  • SHA512

    76919629108fc4ccaef3ab2ad5f0493be2f465a8723c31dfc057ca31625f3634e60c066059be39a3ba58fbba80789e0efa5d464da7b306ece01855f6775ba045

  • SSDEEP

    24576:1bnIaEfpPr2b98AESXVw3U13VZ0wFL2oXQIbubvMqBbI80JaYq3ZiGowSy3PfqH8:1U1fB6pJx1b0kLbXiZBWJaR3PfB29C1

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      e5aeb4a9784edb6431da63763693b9b6a667d43a98e26451e1bd09a946bbaf8d

    • Size

      1.8MB

    • MD5

      5820c3a3cdbbf36e0dc60bac8469ff1c

    • SHA1

      0558ab64d6197b980e56b1832bcbc724a2bc23a1

    • SHA256

      e5aeb4a9784edb6431da63763693b9b6a667d43a98e26451e1bd09a946bbaf8d

    • SHA512

      76919629108fc4ccaef3ab2ad5f0493be2f465a8723c31dfc057ca31625f3634e60c066059be39a3ba58fbba80789e0efa5d464da7b306ece01855f6775ba045

    • SSDEEP

      24576:1bnIaEfpPr2b98AESXVw3U13VZ0wFL2oXQIbubvMqBbI80JaYq3ZiGowSy3PfqH8:1U1fB6pJx1b0kLbXiZBWJaR3PfB29C1

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks