General

  • Target

    18bcbd511f809b860deb60c31d9ad8a01c077a3c27328083f9b4e1b00d665981

  • Size

    1.9MB

  • Sample

    230318-f1vlssbd44

  • MD5

    a6768693a109b0abd4d159cb3894fc93

  • SHA1

    2117e23093473bc3cd2927a964d957cca8ceb6ca

  • SHA256

    18bcbd511f809b860deb60c31d9ad8a01c077a3c27328083f9b4e1b00d665981

  • SHA512

    29750fb52bcd8c63797cae0095b6b5663cf2361f260341a469dc10d23652f735de1c95f67083a0ef47994cab419265575701836bc15e64c0728f4d67ae472042

  • SSDEEP

    24576:HPlnag+O6Q8yGQcDcQn6W/rVysiQYOiUHe+6XtFdJyEfYAgQzivCVeWG2f8X5l7H:vlagV6f7DiWzrSLtTfY2zADX/R

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      18bcbd511f809b860deb60c31d9ad8a01c077a3c27328083f9b4e1b00d665981

    • Size

      1.9MB

    • MD5

      a6768693a109b0abd4d159cb3894fc93

    • SHA1

      2117e23093473bc3cd2927a964d957cca8ceb6ca

    • SHA256

      18bcbd511f809b860deb60c31d9ad8a01c077a3c27328083f9b4e1b00d665981

    • SHA512

      29750fb52bcd8c63797cae0095b6b5663cf2361f260341a469dc10d23652f735de1c95f67083a0ef47994cab419265575701836bc15e64c0728f4d67ae472042

    • SSDEEP

      24576:HPlnag+O6Q8yGQcDcQn6W/rVysiQYOiUHe+6XtFdJyEfYAgQzivCVeWG2f8X5l7H:vlagV6f7DiWzrSLtTfY2zADX/R

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks