Extracted

• • Target

    setup.exe

  • Size

    1.9MB

  • MD5

    27c3e0708804985d4f0758f873509805

  • SHA1

    926ae820a61da9a6241ea94299edfcac963bcf78

  • SHA256

    83224bbf17e2eaad3e40aa076696d35daef0a126d7c7c8125920ff457b4de93d

  • SHA512

    bfca20c53257b54cbd8939bfa3023f3db10e796db0db5a3d445638d3ed73bf79d4510017f2e99470091fb20c615a82ee1d22962770ab053b94947f435aa69966

  • SSDEEP

    49152:RQ7IJR3VJ9Ln5CI3o4U9ekXJkGB0qj5Bl+w:RZJR3VJ9VCAce45BD

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2