General

  • Target

    053036a7cd26440014339b3f1bc5daf8b3cd83df57c73eac552df3ca2f78eaff

  • Size

    1.9MB

  • Sample

    230318-z1kalsdg42

  • MD5

    d82d5fafc8c0f6101377aadd1dd8e876

  • SHA1

    c904ed33def78b0fe785190898b6378afdccaff0

  • SHA256

    053036a7cd26440014339b3f1bc5daf8b3cd83df57c73eac552df3ca2f78eaff

  • SHA512

    347e76f0723dea228c58b3a13a90be669ebaed96bc566a79763f4824d88cb3d9ae1233ffff5c6d9e226b2a1be21383c84b8437970d9cfca85d571d24cc894a30

  • SSDEEP

    49152:GccJZ06n1qsks0c2kOn5nOiz5gyyKJEmS:GBDIs0NxtTJ

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      053036a7cd26440014339b3f1bc5daf8b3cd83df57c73eac552df3ca2f78eaff

    • Size

      1.9MB

    • MD5

      d82d5fafc8c0f6101377aadd1dd8e876

    • SHA1

      c904ed33def78b0fe785190898b6378afdccaff0

    • SHA256

      053036a7cd26440014339b3f1bc5daf8b3cd83df57c73eac552df3ca2f78eaff

    • SHA512

      347e76f0723dea228c58b3a13a90be669ebaed96bc566a79763f4824d88cb3d9ae1233ffff5c6d9e226b2a1be21383c84b8437970d9cfca85d571d24cc894a30

    • SSDEEP

      49152:GccJZ06n1qsks0c2kOn5nOiz5gyyKJEmS:GBDIs0NxtTJ

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks