Extracted

• • Target

    lap.exe

  • Size

    1.9MB

  • MD5

    3c491cde84daac60101335966f900fbd

  • SHA1

    864776f60349bd90f2ae409286d3401e4ec9b63c

  • SHA256

    f82abb756b52669b2dc6911e2d84189018887416fbcf090f8ce32dc7c55a6fb7

  • SHA512

    72f8c94c990bc04f9e48b7124c44b16b617eb02d0fbc11875fe62d01e8da336f4f11e93ca1bae9918a01767174a7232eabed2132c8124ef807ffed964de42f1e

  • SSDEEP

    24576:mf8Wd/isEwOuPdRIsUG5uttp+CUbs0VhKF8gcC8h+WPzJezRevpepQ/nT0WDdOp:4FiTwO8HIsUG8tp+C8jth+IezeqeZO

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2