Extracted

• • Target

    d0ae0f42b639a1dc06fc46b8f2d711f8198e328b4101f4398190d635f1914c5f

  • Size

    1.9MB

  • MD5

    d8c99c5dd392f68fc5b546dfd9020e0f

  • SHA1

    b157ece3c88b5a58d6ecc59d56db1dd08fe8cfe1

  • SHA256

    d0ae0f42b639a1dc06fc46b8f2d711f8198e328b4101f4398190d635f1914c5f

  • SHA512

    961c2f0ef15858aaf1b02eba93da79b9c8c00c3cb34ef5d63fdefe565ceed47739a4d4e604347e2d71e9ad18a6a01064bc3534b805abf248b96373c9f8a7def2

  • SSDEEP

    49152:s+9ZdXslj/Znw1ldQvMM+shYgswP4rsgevHfr6p+UGU:ssdXslj/ZioNh5pPgCj6p+Uf

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1