General

  • Target

    b1daa52ebfe977292fa2cda77a76a06ab6ab216c08f1a55924036a2d721086c7

  • Size

    1.9MB

  • Sample

    230319-j8rfwshf9s

  • MD5

    4c4b63ce68fc94e0ecead721488988ea

  • SHA1

    c94627cbb1547f8ff075633c320b503a3404c4bc

  • SHA256

    b1daa52ebfe977292fa2cda77a76a06ab6ab216c08f1a55924036a2d721086c7

  • SHA512

    d0e6e0582d864396e6ffe11e6163af022b442d939c0f093e9aff97b8f6c40014eb3ce12632dcbc9e06262d9e25526ae697ecf27b05ab32b43f85cac7c38b6a03

  • SSDEEP

    24576:KMU26uH4Wv5IJot6Y6TxwdWJYGyLIXzb68kbAuFee6G8OG8AlC9XT85o4+FqvEl3:KLUvkGMtMGyLIXz+VmG8OvAleT8/g

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      b1daa52ebfe977292fa2cda77a76a06ab6ab216c08f1a55924036a2d721086c7

    • Size

      1.9MB

    • MD5

      4c4b63ce68fc94e0ecead721488988ea

    • SHA1

      c94627cbb1547f8ff075633c320b503a3404c4bc

    • SHA256

      b1daa52ebfe977292fa2cda77a76a06ab6ab216c08f1a55924036a2d721086c7

    • SHA512

      d0e6e0582d864396e6ffe11e6163af022b442d939c0f093e9aff97b8f6c40014eb3ce12632dcbc9e06262d9e25526ae697ecf27b05ab32b43f85cac7c38b6a03

    • SSDEEP

      24576:KMU26uH4Wv5IJot6Y6TxwdWJYGyLIXzb68kbAuFee6G8OG8AlC9XT85o4+FqvEl3:KLUvkGMtMGyLIXz+VmG8OvAleT8/g

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks