General

  • Target

    505123037badf414d1ba076f33305d663708013fe47eff1216fdb7a06c62c394

  • Size

    361KB

  • Sample

    230317-g2mg9agf2x

  • MD5

    1b4c0e1be6994802be38f50ae5e24608

  • SHA1

    b9712764777858621b9cd6a756e12756ecb7e80e

  • SHA256

    505123037badf414d1ba076f33305d663708013fe47eff1216fdb7a06c62c394

  • SHA512

    7632dbefce3c1206f5f7857c6aee5cc13c225c66e0a42928c9d478dc03ee166e2a28dce4bdb2d308eb43babdb65b34597ab5597273ffeb87d8dd594deb932a97

  • SSDEEP

    6144:VV44B8LHfTR2Zk9vk09dH0g3KL0jxwvDtWmFDHv:Vy4B87igk0zeIjxwbw

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      505123037badf414d1ba076f33305d663708013fe47eff1216fdb7a06c62c394

    • Size

      361KB

    • MD5

      1b4c0e1be6994802be38f50ae5e24608

    • SHA1

      b9712764777858621b9cd6a756e12756ecb7e80e

    • SHA256

      505123037badf414d1ba076f33305d663708013fe47eff1216fdb7a06c62c394

    • SHA512

      7632dbefce3c1206f5f7857c6aee5cc13c225c66e0a42928c9d478dc03ee166e2a28dce4bdb2d308eb43babdb65b34597ab5597273ffeb87d8dd594deb932a97

    • SSDEEP

      6144:VV44B8LHfTR2Zk9vk09dH0g3KL0jxwvDtWmFDHv:Vy4B87igk0zeIjxwbw

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks