General

  • Target

    c18e099aff653a5616a1401ca0268c2f7a33b86012a07b2be1bd19ccde628f38

  • Size

    1.9MB

  • Sample

    230318-r2gbcace93

  • MD5

    3434c9617dfb31a20021d756d977f6ff

  • SHA1

    a5b24fcad8e1fb557fea8780449e88a14131b639

  • SHA256

    c18e099aff653a5616a1401ca0268c2f7a33b86012a07b2be1bd19ccde628f38

  • SHA512

    9dadb7eade2bf1bbe13e76491eaef2fe2bce97072414af712ceead6f85b4ff1665d7a5727a1d9f77d6fec60cf5453028dd751d1b7d2249177d082fbb2980a0c7

  • SSDEEP

    49152:chH2KphK+nilTSxMDvPaqVQFghGhULV7JMRS:chpK5RSxMDvPMgGhyG

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      c18e099aff653a5616a1401ca0268c2f7a33b86012a07b2be1bd19ccde628f38

    • Size

      1.9MB

    • MD5

      3434c9617dfb31a20021d756d977f6ff

    • SHA1

      a5b24fcad8e1fb557fea8780449e88a14131b639

    • SHA256

      c18e099aff653a5616a1401ca0268c2f7a33b86012a07b2be1bd19ccde628f38

    • SHA512

      9dadb7eade2bf1bbe13e76491eaef2fe2bce97072414af712ceead6f85b4ff1665d7a5727a1d9f77d6fec60cf5453028dd751d1b7d2249177d082fbb2980a0c7

    • SSDEEP

      49152:chH2KphK+nilTSxMDvPaqVQFghGhULV7JMRS:chpK5RSxMDvPMgGhyG

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks