General

  • Target

    cc1abecc9c66a7c591b1b4feacfbcc4f46ded09ba2141845cdb860108f0e1876

  • Size

    1.9MB

  • Sample

    230319-lar1wafg79

  • MD5

    a3d960222dfdb92fe84e8b9d257da4db

  • SHA1

    90737e7847d878071d8f9ec630f611636af12c53

  • SHA256

    cc1abecc9c66a7c591b1b4feacfbcc4f46ded09ba2141845cdb860108f0e1876

  • SHA512

    954b7c8e39e47a3c2431e57c2e7c4c2da305f7d302c8b098cfa6784840553aa4113fc417e40ca72adc16df74c2549761297a74c44bcbf51c5cc9ead28536b609

  • SSDEEP

    49152:ODXxbbFNftdUdL8YdImjF/BPG5ZPKz2DSqP4bAt:OLx/FNftdUZ8YIKFhG5ZPc2GXE

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      cc1abecc9c66a7c591b1b4feacfbcc4f46ded09ba2141845cdb860108f0e1876

    • Size

      1.9MB

    • MD5

      a3d960222dfdb92fe84e8b9d257da4db

    • SHA1

      90737e7847d878071d8f9ec630f611636af12c53

    • SHA256

      cc1abecc9c66a7c591b1b4feacfbcc4f46ded09ba2141845cdb860108f0e1876

    • SHA512

      954b7c8e39e47a3c2431e57c2e7c4c2da305f7d302c8b098cfa6784840553aa4113fc417e40ca72adc16df74c2549761297a74c44bcbf51c5cc9ead28536b609

    • SSDEEP

      49152:ODXxbbFNftdUdL8YdImjF/BPG5ZPKz2DSqP4bAt:OLx/FNftdUZ8YIKFhG5ZPc2GXE

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks