General

  • Target

    8eedcb9fa507269b6e4930996c16c425e94c7870a0dad263b34dd3d2281e21f0

  • Size

    1.9MB

  • Sample

    230319-rgw63agf67

  • MD5

    52cf0121c6e7906c6ecae7fe91780b37

  • SHA1

    ab1364fb1908684956c80e0e6a5f09ca7f399269

  • SHA256

    8eedcb9fa507269b6e4930996c16c425e94c7870a0dad263b34dd3d2281e21f0

  • SHA512

    671cbc150f70b650af911ba3be0ac1c91e6616d87cd343b354aed1dfc9506766d6116452ab11552628f313c3dc57db1c20b6015c16981b1d8d0f4f30e9d75164

  • SSDEEP

    49152:4wIR0GgwIUR6HdS+DG0DfnwGCsQhp4WCGeEMSkCOU1RSsvBK04JXVbq:45VMdSGDHCsQYDOkCOU/SgmX5

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      8eedcb9fa507269b6e4930996c16c425e94c7870a0dad263b34dd3d2281e21f0

    • Size

      1.9MB

    • MD5

      52cf0121c6e7906c6ecae7fe91780b37

    • SHA1

      ab1364fb1908684956c80e0e6a5f09ca7f399269

    • SHA256

      8eedcb9fa507269b6e4930996c16c425e94c7870a0dad263b34dd3d2281e21f0

    • SHA512

      671cbc150f70b650af911ba3be0ac1c91e6616d87cd343b354aed1dfc9506766d6116452ab11552628f313c3dc57db1c20b6015c16981b1d8d0f4f30e9d75164

    • SSDEEP

      49152:4wIR0GgwIUR6HdS+DG0DfnwGCsQhp4WCGeEMSkCOU1RSsvBK04JXVbq:45VMdSGDHCsQYDOkCOU/SgmX5

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks