General

  • Target

    0b37bc474a4b6782abc6d250d5e34ae6e7d361f0e0c868f1cd683561ab7dea53

  • Size

    1.9MB

  • Sample

    230319-vqjtwabd5v

  • MD5

    61e1daba79cc659eb9b97edaaf2696b6

  • SHA1

    3f32d9eae234307a21e604c1858b4ea75bc4687c

  • SHA256

    0b37bc474a4b6782abc6d250d5e34ae6e7d361f0e0c868f1cd683561ab7dea53

  • SHA512

    6a6d5b3a581cc365746bc6a2415cd2f25f3d7489204ae9c8fe50555fd47313f60b3ac1a5a0fe22a2eaeac3545e7854f48776288a2320cec1e8772c9df3656d63

  • SSDEEP

    49152:0cY596ZofgmxUpjlHHaQoWTzIdh7usL7G0m2:0xvUofhsjl6QvzM7X7u2

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      0b37bc474a4b6782abc6d250d5e34ae6e7d361f0e0c868f1cd683561ab7dea53

    • Size

      1.9MB

    • MD5

      61e1daba79cc659eb9b97edaaf2696b6

    • SHA1

      3f32d9eae234307a21e604c1858b4ea75bc4687c

    • SHA256

      0b37bc474a4b6782abc6d250d5e34ae6e7d361f0e0c868f1cd683561ab7dea53

    • SHA512

      6a6d5b3a581cc365746bc6a2415cd2f25f3d7489204ae9c8fe50555fd47313f60b3ac1a5a0fe22a2eaeac3545e7854f48776288a2320cec1e8772c9df3656d63

    • SSDEEP

      49152:0cY596ZofgmxUpjlHHaQoWTzIdh7usL7G0m2:0xvUofhsjl6QvzM7X7u2

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks