Extracted

• • Target

    f610f0b058b6dcd9afb90f2861251606dca490db7001d66e252bb704fcc551c7

  • Size

    245KB

  • MD5

    12358cc9592b4794a0fd578a9c27af31

  • SHA1

    050e5d65a1460c0363e8316d5b75b4e13374d7a1

  • SHA256

    f610f0b058b6dcd9afb90f2861251606dca490db7001d66e252bb704fcc551c7

  • SHA512

    9c224eefb097be200f3b80480a534983e8b3d12ef6755f0dcdd38044267c3248459c3b2afd39c8b8f8bf8ab5c38c8deb70ef5231344c64b8132aeb9fcdde4c8b

  • SSDEEP

    3072:7gQUwYcJ+quJ/2esNiLuywkXbnExkk67BcgiLdgiy//2TZ0iNGmemsjE6yhfhVAZ:chwl2cgv9L0pMcJmtulvmmmOhoJ

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1