Extracted

• • Target

    7c2e73b65f763f492847eaa6b91be2eccb6c335e1217ff01a7d6a4a7b2c82014

  • Size

    301KB

  • MD5

    2d9679bbc49170b887d3821b01aabf6a

  • SHA1

    3566c78c77867fdf85ab33be7dab7ccf93114113

  • SHA256

    7c2e73b65f763f492847eaa6b91be2eccb6c335e1217ff01a7d6a4a7b2c82014

  • SHA512

    f2f600d1ae2214396a2c1c9d29cb24a895915e985b65d90aae62965d37716b976833e9fbbd656e8955def10a7c02614d34a21b3017b4b0062eba79c6fcd21423

  • SSDEEP

    3072:LQHdwgL2GWaBewgDwtoYHo76MDIRqqb3TW4j3YYX58UtNL:qwgL2PaB6Coh63Rqq/W4j3YhwL

  Score

  10^/10

  laplasclipperdiscoverypersistencespywarestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1