General

  • Target

    9178d0152c7511a2f09a96a647508c211ad860780a50a753ed4c22c0fd71ec98

  • Size

    1.9MB

  • Sample

    230318-qy2mfaee2x

  • MD5

    ad71a24d622cbb5f8335ead026d1bdfc

  • SHA1

    f95ddc723a16ed62fc670069a2e33e358ff68faf

  • SHA256

    9178d0152c7511a2f09a96a647508c211ad860780a50a753ed4c22c0fd71ec98

  • SHA512

    c5fe10a019dabe6cac7e2b50c3e5e2616a66a35c46d7aad600f501a1afa71020e53527c13a3e1bdf0606d362a4c13ed36cda44b2cd8be06cc330d4fa4fca47f1

  • SSDEEP

    49152:KQMNpBLv05kosHTzRIMvQyxmNTD/dscF96zpP6rF/c:KNNLvGkJTywxmIpzcry

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      9178d0152c7511a2f09a96a647508c211ad860780a50a753ed4c22c0fd71ec98

    • Size

      1.9MB

    • MD5

      ad71a24d622cbb5f8335ead026d1bdfc

    • SHA1

      f95ddc723a16ed62fc670069a2e33e358ff68faf

    • SHA256

      9178d0152c7511a2f09a96a647508c211ad860780a50a753ed4c22c0fd71ec98

    • SHA512

      c5fe10a019dabe6cac7e2b50c3e5e2616a66a35c46d7aad600f501a1afa71020e53527c13a3e1bdf0606d362a4c13ed36cda44b2cd8be06cc330d4fa4fca47f1

    • SSDEEP

      49152:KQMNpBLv05kosHTzRIMvQyxmNTD/dscF96zpP6rF/c:KNNLvGkJTywxmIpzcry

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks