General

  • Target

    e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d

  • Size

    1.9MB

  • Sample

    230317-jhc6ksgh8v

  • MD5

    852d500848fe90631597f4c6a195dd37

  • SHA1

    7fd52d47c7ca04b3ce7dbda0c3ff7bf8518f696c

  • SHA256

    e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d

  • SHA512

    14c0ad0c1aa7240cc6509af5cd30b4e28cb6a3619715ea518cdec9018bdfd7d589260ece0f9991dd558069d49551b4c9ca80cfed105396586c3b0f88667a90fb

  • SSDEEP

    49152:vL2WrgyYRhEhqLpAL0GlargNtYafIj/fWC2+Xa0:vHrgyUE+pSlkUo/

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    9ee0ef01cd0f0468c997745b63f39799e510412a4bb4e6ff8efcf6f8ac926172

Targets

    • Target

      e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d

    • Size

      1.9MB

    • MD5

      852d500848fe90631597f4c6a195dd37

    • SHA1

      7fd52d47c7ca04b3ce7dbda0c3ff7bf8518f696c

    • SHA256

      e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d

    • SHA512

      14c0ad0c1aa7240cc6509af5cd30b4e28cb6a3619715ea518cdec9018bdfd7d589260ece0f9991dd558069d49551b4c9ca80cfed105396586c3b0f88667a90fb

    • SSDEEP

      49152:vL2WrgyYRhEhqLpAL0GlargNtYafIj/fWC2+Xa0:vHrgyUE+pSlkUo/

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks