General

  • Target

    feb5a0556e226e438f4ca419f476e611df2ff7112a0668303b2da9ef1d2b89b1

  • Size

    1.9MB

  • Sample

    230317-zarxrsbh5z

  • MD5

    4c89113e9ec9f66382893b6e3b206667

  • SHA1

    d4391bcc02d5589c6c4efc3936048825a2ccbd21

  • SHA256

    feb5a0556e226e438f4ca419f476e611df2ff7112a0668303b2da9ef1d2b89b1

  • SHA512

    349efe882aba9a626a461c02c4e431e16114a59eb916d805f7a1d3fbc2194b6c41b29757c1aa1765eac9f2b276b02ed9e66535476a9b4be7106832ce964f2b5e

  • SSDEEP

    49152:AThnaHxhnOJKQDTrrIw6miz+yQ3GsfYZJ:AoHxheDTrfiyyRsfYP

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      feb5a0556e226e438f4ca419f476e611df2ff7112a0668303b2da9ef1d2b89b1

    • Size

      1.9MB

    • MD5

      4c89113e9ec9f66382893b6e3b206667

    • SHA1

      d4391bcc02d5589c6c4efc3936048825a2ccbd21

    • SHA256

      feb5a0556e226e438f4ca419f476e611df2ff7112a0668303b2da9ef1d2b89b1

    • SHA512

      349efe882aba9a626a461c02c4e431e16114a59eb916d805f7a1d3fbc2194b6c41b29757c1aa1765eac9f2b276b02ed9e66535476a9b4be7106832ce964f2b5e

    • SSDEEP

      49152:AThnaHxhnOJKQDTrrIw6miz+yQ3GsfYZJ:AoHxheDTrfiyyRsfYP

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks