General

  • Target

    8200743c359fa4529468d694e974afb1b1ae588a0097e315ee9812f3126c89d0

  • Size

    255KB

  • Sample

    230316-kf5ngshh98

  • MD5

    d3564d3c30147cdddf8bb6e6b3e70dee

  • SHA1

    ab99a2951c439c865ba6a05d8aa2aabbdb367aa9

  • SHA256

    8200743c359fa4529468d694e974afb1b1ae588a0097e315ee9812f3126c89d0

  • SHA512

    f2179fe64f95e9da5164479dece11ab38e21f091a3fa6dde083ef33340e4ba6694387df6234a880e3667a7514e1b3d586732cd82ef175aeeac2ef5b1445a86a5

  • SSDEEP

    6144:zKXFR9k8nbrT+Q4I5346XJVpOhWKx/wHpe1ZOt:2XF4El4a371O/Oe1

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      8200743c359fa4529468d694e974afb1b1ae588a0097e315ee9812f3126c89d0

    • Size

      255KB

    • MD5

      d3564d3c30147cdddf8bb6e6b3e70dee

    • SHA1

      ab99a2951c439c865ba6a05d8aa2aabbdb367aa9

    • SHA256

      8200743c359fa4529468d694e974afb1b1ae588a0097e315ee9812f3126c89d0

    • SHA512

      f2179fe64f95e9da5164479dece11ab38e21f091a3fa6dde083ef33340e4ba6694387df6234a880e3667a7514e1b3d586732cd82ef175aeeac2ef5b1445a86a5

    • SSDEEP

      6144:zKXFR9k8nbrT+Q4I5346XJVpOhWKx/wHpe1ZOt:2XF4El4a371O/Oe1

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks