General

  • Target

    4bb575fa434480978c50ef8455786b94f1bbaffb4186a4e08379fa550ec9aeea

  • Size

    1.9MB

  • Sample

    230318-zvlw9adg36

  • MD5

    7e897816bfd13b9ea1d97aa419ee4a04

  • SHA1

    c0b234e1c3bbb582fc738b2760ae53ffea404f03

  • SHA256

    4bb575fa434480978c50ef8455786b94f1bbaffb4186a4e08379fa550ec9aeea

  • SHA512

    94dfb74f2101437165eef30b8f067ac977ec16cc270b42e2dd24fd7e7d56c94b8572685f5aab71ff124bf220361246c3c4f148349e2a8e953d7a731a4b740529

  • SSDEEP

    49152:eNs+8DCEmGEwFUDArdOxhXccs2YGBCsGI:eNsgEmGPWAmhuRGgI

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      4bb575fa434480978c50ef8455786b94f1bbaffb4186a4e08379fa550ec9aeea

    • Size

      1.9MB

    • MD5

      7e897816bfd13b9ea1d97aa419ee4a04

    • SHA1

      c0b234e1c3bbb582fc738b2760ae53ffea404f03

    • SHA256

      4bb575fa434480978c50ef8455786b94f1bbaffb4186a4e08379fa550ec9aeea

    • SHA512

      94dfb74f2101437165eef30b8f067ac977ec16cc270b42e2dd24fd7e7d56c94b8572685f5aab71ff124bf220361246c3c4f148349e2a8e953d7a731a4b740529

    • SSDEEP

      49152:eNs+8DCEmGEwFUDArdOxhXccs2YGBCsGI:eNsgEmGPWAmhuRGgI

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks