Extracted

• • Target

    setup.exe

  • Size

    1.9MB

  • MD5

    4ac3b05f28208a1c41831fd781327f12

  • SHA1

    7660c9502daf62105414244e07b5e594874d45be

  • SHA256

    a6a66627e3422140f5e1bb3eaca83d8b124c85734029b9ce216d5d33a35af69a

  • SHA512

    ea03824f65e138a31180ec442f60e3de347e0e20fd91144eecd695c1c92caf42b576e24c8d5f96c18acdfdbdeb2aee392a95566b361c884a610c0fc0d8b66720

  • SSDEEP

    49152:nVM1o+LRAoWrYMgxE407GpZl44dphdLVMh3/fYgnPfX09:nVM1okOoaYzxE40Kp44PfUjf

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2