Extracted

• • Target

    installer.exe

  • Size

    1.9MB

  • MD5

    8a72fa049d56ec4cacc2829db61552a6

  • SHA1

    fa0b26a405751d1119ba005cc354583dd0ac19a6

  • SHA256

    683d200bc03f75a371ad5f8e6ce353c36eddca7c3db3cc155852ed675ec627be

  • SHA512

    49551698ac74431e630d007710f59c0f6b4a66c57f4e7e9ba123473e12db2dd5e1fcf8051cb96b8fe2fb61b9cb6230f7f4831c9446c164185041d529a611399e

  • SSDEEP

    49152:Ql+S9xH3mSoXhsOMf6X/7otK6QvjAIwieJUnf1/8V:QUS9sSoXbMsT2KpbAWJfy

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2