General

  • Target

    159064b0b1e732079092f0fe367c3eca8ec8b359fb427868b28c65878b4de696

  • Size

    1.9MB

  • Sample

    230319-bdhaqsec74

  • MD5

    e318cdda3c407337ea8b36782f1708ac

  • SHA1

    fe61548bde839be77777ff6ddf476710c2c576da

  • SHA256

    159064b0b1e732079092f0fe367c3eca8ec8b359fb427868b28c65878b4de696

  • SHA512

    11cd1aff62deb355c9085954fc388a8f6924e0e1da8f7354201e5da1858668aec7daeca805cca5af73160828e3a7acd32137c5211422ab4914a40417a3e76753

  • SSDEEP

    49152:jkHdHdC75YBlCqm4/kdJjAWfdhSI+dW9ZltP4PdSsG0C:jkHd9S5mCqFk7fdx+duPP4Pss1

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      159064b0b1e732079092f0fe367c3eca8ec8b359fb427868b28c65878b4de696

    • Size

      1.9MB

    • MD5

      e318cdda3c407337ea8b36782f1708ac

    • SHA1

      fe61548bde839be77777ff6ddf476710c2c576da

    • SHA256

      159064b0b1e732079092f0fe367c3eca8ec8b359fb427868b28c65878b4de696

    • SHA512

      11cd1aff62deb355c9085954fc388a8f6924e0e1da8f7354201e5da1858668aec7daeca805cca5af73160828e3a7acd32137c5211422ab4914a40417a3e76753

    • SSDEEP

      49152:jkHdHdC75YBlCqm4/kdJjAWfdhSI+dW9ZltP4PdSsG0C:jkHd9S5mCqFk7fdx+duPP4Pss1

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks