General

  • Target

    5255e7a0a61ce555c674b02b145de23c3786f720a35387a40deb62c6090bdd36

  • Size

    1.9MB

  • Sample

    230316-emjfyabb8w

  • MD5

    28dda2f8e28bbbd5add5cbdd625f7a84

  • SHA1

    14ab09b29abc7513898fabbb65255914313154bd

  • SHA256

    5255e7a0a61ce555c674b02b145de23c3786f720a35387a40deb62c6090bdd36

  • SHA512

    5578002cb4783bf03cfd94ddaf0319b587417d21d1e9482fb907743d72ec1f912ba25b37b80e0c5d0930418dce3ef8d3c1decbccd91c23c4990a49659704cc48

  • SSDEEP

    24576:SOXUVHPWHO8l++haOoe4QwNi/SJlvlUYNQFxVBGawWA2ZK1ALJbCY7o6rp8WX18:SO6/1+aQ4rNVynji2nLJbj7o6rqP

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      5255e7a0a61ce555c674b02b145de23c3786f720a35387a40deb62c6090bdd36

    • Size

      1.9MB

    • MD5

      28dda2f8e28bbbd5add5cbdd625f7a84

    • SHA1

      14ab09b29abc7513898fabbb65255914313154bd

    • SHA256

      5255e7a0a61ce555c674b02b145de23c3786f720a35387a40deb62c6090bdd36

    • SHA512

      5578002cb4783bf03cfd94ddaf0319b587417d21d1e9482fb907743d72ec1f912ba25b37b80e0c5d0930418dce3ef8d3c1decbccd91c23c4990a49659704cc48

    • SSDEEP

      24576:SOXUVHPWHO8l++haOoe4QwNi/SJlvlUYNQFxVBGawWA2ZK1ALJbCY7o6rp8WX18:SO6/1+aQ4rNVynji2nLJbj7o6rqP

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks