General

  • Target

    12b7fc5390f04ed23965620a22fc06ef36f45532ac9090a95ad56a76e09a679a

  • Size

    1.8MB

  • Sample

    230314-sdblmaab2z

  • MD5

    58cc2c4b261f0086cc45a7a0c6db0ce3

  • SHA1

    11ae1632dd8d7872a26c255f0a92a95344e6b0d2

  • SHA256

    12b7fc5390f04ed23965620a22fc06ef36f45532ac9090a95ad56a76e09a679a

  • SHA512

    5ef309306807745e4093bfc018ebfd6007fd8127aa98864dd2dc804de832980d26c893c2294f1c20d4aebe49b1f4a14c07867d96ca09d3cc26b90a88716eb31e

  • SSDEEP

    49152:/xpZ/6FIDTqXXDZgIwqcc/TwgvSLxuAcmbxx:/l6FmGHtBwqcc/sWSd7Nbx

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      12b7fc5390f04ed23965620a22fc06ef36f45532ac9090a95ad56a76e09a679a

    • Size

      1.8MB

    • MD5

      58cc2c4b261f0086cc45a7a0c6db0ce3

    • SHA1

      11ae1632dd8d7872a26c255f0a92a95344e6b0d2

    • SHA256

      12b7fc5390f04ed23965620a22fc06ef36f45532ac9090a95ad56a76e09a679a

    • SHA512

      5ef309306807745e4093bfc018ebfd6007fd8127aa98864dd2dc804de832980d26c893c2294f1c20d4aebe49b1f4a14c07867d96ca09d3cc26b90a88716eb31e

    • SSDEEP

      49152:/xpZ/6FIDTqXXDZgIwqcc/TwgvSLxuAcmbxx:/l6FmGHtBwqcc/sWSd7Nbx

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks