General

  • Target

    a1db5201134e0c075333d2dbc8be56a24e61456f7085270c626a6f4b7b612a92

  • Size

    1.9MB

  • Sample

    230316-ac9sxsga35

  • MD5

    743552803ed2f0f8c705988cf6a8e36b

  • SHA1

    017209d485e21a24e367923123fe8248765ba4cb

  • SHA256

    a1db5201134e0c075333d2dbc8be56a24e61456f7085270c626a6f4b7b612a92

  • SHA512

    dece1d44b9225442ecfe069c8c987ecb9578cc511ad2229235158c75901567713bbbd9b8a5fe1636009c6bf8828d80a0556c72acaa73ff136ad1d05c639743f3

  • SSDEEP

    49152:ibzZ1Ix959CT9n1sAOG9y+J23zsV8xub2fMKudC:ibzXIhm1YxgVp2fMZC

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      a1db5201134e0c075333d2dbc8be56a24e61456f7085270c626a6f4b7b612a92

    • Size

      1.9MB

    • MD5

      743552803ed2f0f8c705988cf6a8e36b

    • SHA1

      017209d485e21a24e367923123fe8248765ba4cb

    • SHA256

      a1db5201134e0c075333d2dbc8be56a24e61456f7085270c626a6f4b7b612a92

    • SHA512

      dece1d44b9225442ecfe069c8c987ecb9578cc511ad2229235158c75901567713bbbd9b8a5fe1636009c6bf8828d80a0556c72acaa73ff136ad1d05c639743f3

    • SSDEEP

      49152:ibzZ1Ix959CT9n1sAOG9y+J23zsV8xub2fMKudC:ibzXIhm1YxgVp2fMZC

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks