Extracted

• • Target

    cd6d1fc1e1c7aa4e7059db17fcda574632144dc259e74ec6d93af7998daf8fe1

  • Size

    245KB

  • MD5

    20fd7e0d6d612fc2f2d1629514e3c56a

  • SHA1

    41d288ec8a612e3d6aedfcc2f1e143dcacfe264c

  • SHA256

    cd6d1fc1e1c7aa4e7059db17fcda574632144dc259e74ec6d93af7998daf8fe1

  • SHA512

    3405cefedfe96d2cce8784bc6e560f4fcf746a30973029569a191807b564cd0a493999ffa7baf81b8820435c82db4cdfb04eebdca1fea0d8dd757d0590c1b65c

  • SSDEEP

    6144:6uW+M387hDdxhZykOR3NmQ737S63BxJvV3UhXJ:6uWx38N5qR3X7rHtk

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1