General

  • Target

    a286b62e3ae77cf3c260bd20986d446e08afbe72e642883d529d83e56674446d

  • Size

    1.9MB

  • Sample

    230319-mdb99sfh97

  • MD5

    9168ec28d42b59ac24e152d107de761f

  • SHA1

    a6e74e0c2f4f85472aa6734b347743d8e187056d

  • SHA256

    a286b62e3ae77cf3c260bd20986d446e08afbe72e642883d529d83e56674446d

  • SHA512

    1bf72d0f663ed83c27eb3986457695ed61a143e53a74eaf39586d2ec7d27e2bc288ae2ec1671e911ee714625607a09b19fd5d909e1338bd26020e546872d3f54

  • SSDEEP

    49152:+K/LohE2B47+2T1Uyd7wIUUXbp9u6eXLvVTs3CJVO:+wsdmL1dwIUUX7deXLxDO

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      a286b62e3ae77cf3c260bd20986d446e08afbe72e642883d529d83e56674446d

    • Size

      1.9MB

    • MD5

      9168ec28d42b59ac24e152d107de761f

    • SHA1

      a6e74e0c2f4f85472aa6734b347743d8e187056d

    • SHA256

      a286b62e3ae77cf3c260bd20986d446e08afbe72e642883d529d83e56674446d

    • SHA512

      1bf72d0f663ed83c27eb3986457695ed61a143e53a74eaf39586d2ec7d27e2bc288ae2ec1671e911ee714625607a09b19fd5d909e1338bd26020e546872d3f54

    • SSDEEP

      49152:+K/LohE2B47+2T1Uyd7wIUUXbp9u6eXLvVTs3CJVO:+wsdmL1dwIUUX7deXLxDO

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks