Extracted

• • Target

    installer.exe

  • Size

    245KB

  • MD5

    8f5f61c192960b47701d367d4c0112a6

  • SHA1

    e084cb5d4457be7cfba1c79adcc1ae59a500a66f

  • SHA256

    d4607fe27527413aa9685e2ecbce8df78b2c2538ccc5703442f7757a100c1362

  • SHA512

    9cf04819b99aff1e5247d1d2e4fe134cffbb1278fb8bdd62be3bcfcfa4a4dcc3ed1d7f8d82824328d1d0e41dbda09a56b788e3636f4968fc7641307a9a6ad9db

  • SSDEEP

    6144:jbOxXV0HcczeTv85qfnl2Hrti0ChhQhGJ:jbOxWHLzGrnUHZi0Chu

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2