General

  • Target

    de7320a71b9a0de261be6f7a8d36a6f13c3989681bb98627bc169d0e3f3c76eb

  • Size

    1.9MB

  • Sample

    230319-bxb8tsgd8s

  • MD5

    87b5057f44c2a25338f03f6ba10358ad

  • SHA1

    b8d68c22a48b7b1dabecf2d0cb830392291e3cab

  • SHA256

    de7320a71b9a0de261be6f7a8d36a6f13c3989681bb98627bc169d0e3f3c76eb

  • SHA512

    2c6463eb46b6f2f263beb3601bdf909f7dfb24c4b1b0cb5dd6f19777ae703d7daa84c483e575ffce2792751925668afb6bf4bf0bd2f7e0898f057900eb4b9367

  • SSDEEP

    49152:oM/+7nPk+ae5ce+4E4+OFqG5nYhdB8DrMFm:oM/gPkzeXEORnYhUi

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      de7320a71b9a0de261be6f7a8d36a6f13c3989681bb98627bc169d0e3f3c76eb

    • Size

      1.9MB

    • MD5

      87b5057f44c2a25338f03f6ba10358ad

    • SHA1

      b8d68c22a48b7b1dabecf2d0cb830392291e3cab

    • SHA256

      de7320a71b9a0de261be6f7a8d36a6f13c3989681bb98627bc169d0e3f3c76eb

    • SHA512

      2c6463eb46b6f2f263beb3601bdf909f7dfb24c4b1b0cb5dd6f19777ae703d7daa84c483e575ffce2792751925668afb6bf4bf0bd2f7e0898f057900eb4b9367

    • SSDEEP

      49152:oM/+7nPk+ae5ce+4E4+OFqG5nYhdB8DrMFm:oM/gPkzeXEORnYhUi

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks