General

  • Target

    fd517e6d3271b9a989afa22ce38db6bf0fc6d20ea84faaf0e74890530d694a67

  • Size

    1.9MB

  • Sample

    230318-dbq6zada5y

  • MD5

    10ca7006da58a867243524ef06e9ba10

  • SHA1

    890131a6e5db1442acdba2edde744a8222642652

  • SHA256

    fd517e6d3271b9a989afa22ce38db6bf0fc6d20ea84faaf0e74890530d694a67

  • SHA512

    7210dd56af754e013aa6d2a4c282bbb020bf41aa336d5f5b2d9709d1f446502275cb998e844f03494c4abfbdba3c5c390e37c1850829eb137cbe9cfb860525fb

  • SSDEEP

    49152:lmmghYtG62ibS018yzHMCbZZUHe6YWvHin1k:lkhE9jbzbbZZU+6nH

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      fd517e6d3271b9a989afa22ce38db6bf0fc6d20ea84faaf0e74890530d694a67

    • Size

      1.9MB

    • MD5

      10ca7006da58a867243524ef06e9ba10

    • SHA1

      890131a6e5db1442acdba2edde744a8222642652

    • SHA256

      fd517e6d3271b9a989afa22ce38db6bf0fc6d20ea84faaf0e74890530d694a67

    • SHA512

      7210dd56af754e013aa6d2a4c282bbb020bf41aa336d5f5b2d9709d1f446502275cb998e844f03494c4abfbdba3c5c390e37c1850829eb137cbe9cfb860525fb

    • SSDEEP

      49152:lmmghYtG62ibS018yzHMCbZZUHe6YWvHin1k:lkhE9jbzbbZZU+6nH

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks