General

  • Target

    53a83f52c0081a6a435ed229101bc006315d364043e9ee0ca9d20364c60f0fa6

  • Size

    1.8MB

  • Sample

    230314-x7trhshe35

  • MD5

    32bdf62d0f9de2fad0a435f9e1655051

  • SHA1

    bde4e28be80633a9804b0cb52eaa563f0b941514

  • SHA256

    53a83f52c0081a6a435ed229101bc006315d364043e9ee0ca9d20364c60f0fa6

  • SHA512

    9cb42693d7a4e478b0fe79f45e77f36399a78177475c300ea814929d1a6eb49c966cb4bfefc0abcd732a22a86b15670c471f344dd400f9497af9081e716ce3aa

  • SSDEEP

    49152:A+7yJUfE1X/U+nBcNufOBwQJl4ipozjt:x7yJUfE5s+nBc2OBwQzOzx

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      53a83f52c0081a6a435ed229101bc006315d364043e9ee0ca9d20364c60f0fa6

    • Size

      1.8MB

    • MD5

      32bdf62d0f9de2fad0a435f9e1655051

    • SHA1

      bde4e28be80633a9804b0cb52eaa563f0b941514

    • SHA256

      53a83f52c0081a6a435ed229101bc006315d364043e9ee0ca9d20364c60f0fa6

    • SHA512

      9cb42693d7a4e478b0fe79f45e77f36399a78177475c300ea814929d1a6eb49c966cb4bfefc0abcd732a22a86b15670c471f344dd400f9497af9081e716ce3aa

    • SSDEEP

      49152:A+7yJUfE1X/U+nBcNufOBwQJl4ipozjt:x7yJUfE5s+nBc2OBwQzOzx

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks