General

  • Target

    e3d43b3b6a41985aa2a8b2e3432bf8409e542113d13df1a1658e0508e187dc3e

  • Size

    1.9MB

  • Sample

    230318-2e8gesgb2y

  • MD5

    7d1c375649982b6578629a8e3d6633d4

  • SHA1

    67a356982d102f4c7520f2efa7e139a1a1541635

  • SHA256

    e3d43b3b6a41985aa2a8b2e3432bf8409e542113d13df1a1658e0508e187dc3e

  • SHA512

    e3f1939fd64005f3157973ef3582cf19be69163ebe4cb37181da224c97afdb0db8b81be0567a280b52dc72daadae71114ccc0baac166be4e9fd0cbbd343d8d18

  • SSDEEP

    49152:FL3A30haYw6K977QCMgLyLbXcSVKHhf9:FTgfjMg+LbXc7H

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      e3d43b3b6a41985aa2a8b2e3432bf8409e542113d13df1a1658e0508e187dc3e

    • Size

      1.9MB

    • MD5

      7d1c375649982b6578629a8e3d6633d4

    • SHA1

      67a356982d102f4c7520f2efa7e139a1a1541635

    • SHA256

      e3d43b3b6a41985aa2a8b2e3432bf8409e542113d13df1a1658e0508e187dc3e

    • SHA512

      e3f1939fd64005f3157973ef3582cf19be69163ebe4cb37181da224c97afdb0db8b81be0567a280b52dc72daadae71114ccc0baac166be4e9fd0cbbd343d8d18

    • SSDEEP

      49152:FL3A30haYw6K977QCMgLyLbXcSVKHhf9:FTgfjMg+LbXc7H

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks