General

  • Target

    3e08199217335ec183db9fd5eb80c628a4b80a8fa21af1cf0df85ed8ed872f16

  • Size

    1.9MB

  • Sample

    230319-m9vfqaab5z

  • MD5

    d8aeb228901b4dd3f476ea6b4028193e

  • SHA1

    b164fafa4c10ed2f159b85221dadb1fa711b4be5

  • SHA256

    3e08199217335ec183db9fd5eb80c628a4b80a8fa21af1cf0df85ed8ed872f16

  • SHA512

    7e021c9d3d49fed34692e16461a2094cdee1d13bb66c083c7db51a6988b53a1d56cc6eacba2da1cf1b204c1dd95d979db5306ec78bae5cd73f15dcc7e4a4fa1f

  • SSDEEP

    24576:8Q2d/KkSGgByexJk3RBZ6XkvhMp/zIPQn1Z3jVsMA1+hjZl7cp0LZ1kuy+GSAUbQ:8Qw/KkUsSk30qhMZzltNW01G0KUSxJ

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      3e08199217335ec183db9fd5eb80c628a4b80a8fa21af1cf0df85ed8ed872f16

    • Size

      1.9MB

    • MD5

      d8aeb228901b4dd3f476ea6b4028193e

    • SHA1

      b164fafa4c10ed2f159b85221dadb1fa711b4be5

    • SHA256

      3e08199217335ec183db9fd5eb80c628a4b80a8fa21af1cf0df85ed8ed872f16

    • SHA512

      7e021c9d3d49fed34692e16461a2094cdee1d13bb66c083c7db51a6988b53a1d56cc6eacba2da1cf1b204c1dd95d979db5306ec78bae5cd73f15dcc7e4a4fa1f

    • SSDEEP

      24576:8Q2d/KkSGgByexJk3RBZ6XkvhMp/zIPQn1Z3jVsMA1+hjZl7cp0LZ1kuy+GSAUbQ:8Qw/KkUsSk30qhMZzltNW01G0KUSxJ

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks