General

  • Target

    4fbb0bcbc6baaba9f3e438708a4c2d2091489b5ff42bc10bf7d07721597feec0

  • Size

    1.9MB

  • Sample

    230319-amz2gaeb94

  • MD5

    828e5145c076da94aefc34bac1a4fdc3

  • SHA1

    433e55b78f47f956a78b3ad51d2162468e2d277f

  • SHA256

    4fbb0bcbc6baaba9f3e438708a4c2d2091489b5ff42bc10bf7d07721597feec0

  • SHA512

    ad516843e7c287af9a6aed41a987eb059ea191836687219e5fde75069f43bf8318d1cb3dd25df32797fa9cf6a4c5525af60d46b00d63c838eb5704f8649ab85b

  • SSDEEP

    49152:GtP4k4khOWUXGLuK2fj06WbCMq7ekzO9T:GFLwXEuK2fjSbdkz

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      4fbb0bcbc6baaba9f3e438708a4c2d2091489b5ff42bc10bf7d07721597feec0

    • Size

      1.9MB

    • MD5

      828e5145c076da94aefc34bac1a4fdc3

    • SHA1

      433e55b78f47f956a78b3ad51d2162468e2d277f

    • SHA256

      4fbb0bcbc6baaba9f3e438708a4c2d2091489b5ff42bc10bf7d07721597feec0

    • SHA512

      ad516843e7c287af9a6aed41a987eb059ea191836687219e5fde75069f43bf8318d1cb3dd25df32797fa9cf6a4c5525af60d46b00d63c838eb5704f8649ab85b

    • SSDEEP

      49152:GtP4k4khOWUXGLuK2fj06WbCMq7ekzO9T:GFLwXEuK2fjSbdkz

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks