General

  • Target

    setup.exe

  • Size

    1.8MB

  • Sample

    230315-d6gwsadb9z

  • MD5

    f94d6eccab8832b99c98c5bc416e1af0

  • SHA1

    a2072e964c557fbb322f93d554dade226561013d

  • SHA256

    8184da84f2c3efe78c83d045d75e998a5983ca1ec75f57fd6128c9165f236f68

  • SHA512

    61f6c4f1941ec018ae1c2deb7d6e31106130d683d4f06c985b6e3c92233b0303454218fc8351807e70c7bbc4123db4b47fe296153f8c4d87ed0bea17fb8f7079

  • SSDEEP

    49152:8QiGcgi92aIH9Do1ZfWC4wmzu4iOM/Gx:jJKZfWKmzu4O/G

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      setup.exe

    • Size

      1.8MB

    • MD5

      f94d6eccab8832b99c98c5bc416e1af0

    • SHA1

      a2072e964c557fbb322f93d554dade226561013d

    • SHA256

      8184da84f2c3efe78c83d045d75e998a5983ca1ec75f57fd6128c9165f236f68

    • SHA512

      61f6c4f1941ec018ae1c2deb7d6e31106130d683d4f06c985b6e3c92233b0303454218fc8351807e70c7bbc4123db4b47fe296153f8c4d87ed0bea17fb8f7079

    • SSDEEP

      49152:8QiGcgi92aIH9Do1ZfWC4wmzu4iOM/Gx:jJKZfWKmzu4O/G

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks