General

  • Target

    6eb9605256050c8b7e28a8826b18c99c003ec3fc409488bf7ac46938218327d7

  • Size

    1.9MB

  • Sample

    230318-k5dw3abg49

  • MD5

    8bb56e0f24d4285fa780dc82377dc870

  • SHA1

    9e5a223f7e7307a3f940152288f4ed077dc231fe

  • SHA256

    6eb9605256050c8b7e28a8826b18c99c003ec3fc409488bf7ac46938218327d7

  • SHA512

    7509638f2899b1d4364b04fcab0b59b6efc3dff319c1e4dea77bcfe29414f7bbdc66d516e2c86b8710c946b569b282d8fb03db14eda8d444df6fc0f2b85c6ed6

  • SSDEEP

    49152:eEh380WJVmRbOWot7LwBVmRY7ewtjgPAf3oK2NpTa:eE/kcRbqLSveAjgPIGe

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      6eb9605256050c8b7e28a8826b18c99c003ec3fc409488bf7ac46938218327d7

    • Size

      1.9MB

    • MD5

      8bb56e0f24d4285fa780dc82377dc870

    • SHA1

      9e5a223f7e7307a3f940152288f4ed077dc231fe

    • SHA256

      6eb9605256050c8b7e28a8826b18c99c003ec3fc409488bf7ac46938218327d7

    • SHA512

      7509638f2899b1d4364b04fcab0b59b6efc3dff319c1e4dea77bcfe29414f7bbdc66d516e2c86b8710c946b569b282d8fb03db14eda8d444df6fc0f2b85c6ed6

    • SSDEEP

      49152:eEh380WJVmRbOWot7LwBVmRY7ewtjgPAf3oK2NpTa:eE/kcRbqLSveAjgPIGe

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks