Extracted

• • Target

    a79893e20ce928c0dee25e1f6d64f7e88cdf7cf0db83e923decd0bf643f0f951

  • Size

    1.9MB

  • MD5

    bffa52b5cf6599656807cd59666821d4

  • SHA1

    a5b4f03c320488e0c616c7070166c3eccfe235c3

  • SHA256

    a79893e20ce928c0dee25e1f6d64f7e88cdf7cf0db83e923decd0bf643f0f951

  • SHA512

    6cc12e483dfb8e6680621fc5536158211c26ab82191db935731c3667a3c44c135edb34ec10809bb4a1ec8007eac8f2af424e130d8810ed34370ef9b9a9fa94c8

  • SSDEEP

    49152:AtsFLm7INZOOBfPcdTG9I83aewdjxB0n+2Jlzwz0:At2LmCOOBfEdTXiwd0n++lR

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1