General

  • Target

    file.exe

  • Size

    1.9MB

  • Sample

    230315-nwrncada35

  • MD5

    e4321deefba7523e1495992b0d8b655a

  • SHA1

    78883ae71aea1dd62a0213e54b431553e5e61647

  • SHA256

    98446a2ba850c3132d15b9cc773c365052631e83f734a2ec0e19f7b71dce3f3d

  • SHA512

    acbeb4cb61276a5464924a972cf0ea874ca287959b6a120588acda8077d54188265b247dd23f7b9a1281f1df0b81437e3e498e1eb22c21fbfba986e77f970b30

  • SSDEEP

    49152:yf/wWlz2lOSHEQKH7J4pwF1KmQyAXszJs:ynwblOSkQKH9Kw7KrK

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      file.exe

    • Size

      1.9MB

    • MD5

      e4321deefba7523e1495992b0d8b655a

    • SHA1

      78883ae71aea1dd62a0213e54b431553e5e61647

    • SHA256

      98446a2ba850c3132d15b9cc773c365052631e83f734a2ec0e19f7b71dce3f3d

    • SHA512

      acbeb4cb61276a5464924a972cf0ea874ca287959b6a120588acda8077d54188265b247dd23f7b9a1281f1df0b81437e3e498e1eb22c21fbfba986e77f970b30

    • SSDEEP

      49152:yf/wWlz2lOSHEQKH7J4pwF1KmQyAXszJs:ynwblOSkQKH9Kw7KrK

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks