General

  • Target

    tmp

  • Size

    1.9MB

  • Sample

    230317-y7c97shh47

  • MD5

    665c62d3bd6c21614fafb9a9b50bb574

  • SHA1

    56322f2bb8a61954e6ec974612154402cdd98b29

  • SHA256

    a82b9eff2dde393899dfa05985773fc9d124816b675019a0a8c551d9bb6d4d99

  • SHA512

    07fda86a50c1aca80db3906e4201ec4f97be00d1563eb386d750b28160cd30bed1435e473c9330943d5c854a55fc7078bcdd3c99731fabd8019b1b22e10f9ed7

  • SSDEEP

    49152:vmixags4hfkNAm3X86KoCwwJFZTjS7Pt5o:vNagdhcNAqHKoCnbUPt

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    0be23a6bec914a7d28f1aae995f036fdba93224093ddb48d02fe43e814862f4e

Targets

    • Target

      tmp

    • Size

      1.9MB

    • MD5

      665c62d3bd6c21614fafb9a9b50bb574

    • SHA1

      56322f2bb8a61954e6ec974612154402cdd98b29

    • SHA256

      a82b9eff2dde393899dfa05985773fc9d124816b675019a0a8c551d9bb6d4d99

    • SHA512

      07fda86a50c1aca80db3906e4201ec4f97be00d1563eb386d750b28160cd30bed1435e473c9330943d5c854a55fc7078bcdd3c99731fabd8019b1b22e10f9ed7

    • SSDEEP

      49152:vmixags4hfkNAm3X86KoCwwJFZTjS7Pt5o:vNagdhcNAqHKoCnbUPt

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks