General

  • Target

    73eef036c89bcd8ce1318908f931630803790b6394daaeddec21a8992ec4e71b

  • Size

    1.9MB

  • Sample

    230318-vczceach96

  • MD5

    a28137b2430f3dc53a56c6e5c8473ddb

  • SHA1

    227c821a7d804c300abf0ff965caf10a43304124

  • SHA256

    73eef036c89bcd8ce1318908f931630803790b6394daaeddec21a8992ec4e71b

  • SHA512

    88710589fdd09ca2265e576c635e2803cdb117dc95c16df0d1612ed546f4267ceb0d33f46977e5bbe49f77c1260453755ff415a0ba6960baea126f586b6704f0

  • SSDEEP

    49152:XIG8Gkz9bf03CKu31Nkl3glJ2u/3H57L:XIGpkBwyKu31NklQ9/3

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      73eef036c89bcd8ce1318908f931630803790b6394daaeddec21a8992ec4e71b

    • Size

      1.9MB

    • MD5

      a28137b2430f3dc53a56c6e5c8473ddb

    • SHA1

      227c821a7d804c300abf0ff965caf10a43304124

    • SHA256

      73eef036c89bcd8ce1318908f931630803790b6394daaeddec21a8992ec4e71b

    • SHA512

      88710589fdd09ca2265e576c635e2803cdb117dc95c16df0d1612ed546f4267ceb0d33f46977e5bbe49f77c1260453755ff415a0ba6960baea126f586b6704f0

    • SSDEEP

      49152:XIG8Gkz9bf03CKu31Nkl3glJ2u/3H57L:XIGpkBwyKu31NklQ9/3

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks