General

  • Target

    68c1350d42559ba8494a49bcb6c26735c3e66622b92f5dfbee5735a30a9be0d4

  • Size

    1.9MB

  • Sample

    230319-ns838agb78

  • MD5

    7a98329de3f1dbd9ca49acf2978acdac

  • SHA1

    47485cd8c37f023d29faba6f85ca45b11a0e8cc5

  • SHA256

    68c1350d42559ba8494a49bcb6c26735c3e66622b92f5dfbee5735a30a9be0d4

  • SHA512

    995dcbd525df216c7c2ec0a6b5ad7bc1a46686e13d9aeecb8ebefaca5558fccafdd6c586f55ec7ebc37b44d5b46c2acf72a108ccee88de66eef2bdd4e3d66e94

  • SSDEEP

    49152:00De6VC+R39MuU4wfpno+/VwjsWeQ0f+r1RPP+F2:0oeeC+R39MuUD/VwwWdxrXL

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      68c1350d42559ba8494a49bcb6c26735c3e66622b92f5dfbee5735a30a9be0d4

    • Size

      1.9MB

    • MD5

      7a98329de3f1dbd9ca49acf2978acdac

    • SHA1

      47485cd8c37f023d29faba6f85ca45b11a0e8cc5

    • SHA256

      68c1350d42559ba8494a49bcb6c26735c3e66622b92f5dfbee5735a30a9be0d4

    • SHA512

      995dcbd525df216c7c2ec0a6b5ad7bc1a46686e13d9aeecb8ebefaca5558fccafdd6c586f55ec7ebc37b44d5b46c2acf72a108ccee88de66eef2bdd4e3d66e94

    • SSDEEP

      49152:00De6VC+R39MuU4wfpno+/VwjsWeQ0f+r1RPP+F2:0oeeC+R39MuUD/VwwWdxrXL

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks