Extracted

• • Target

    e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d.exe

  • Size

    1.9MB

  • MD5

    852d500848fe90631597f4c6a195dd37

  • SHA1

    7fd52d47c7ca04b3ce7dbda0c3ff7bf8518f696c

  • SHA256

    e6e18386e2e9ec24934db1316e29a6e1c104f0e14f61d72934c96270b098d62d

  • SHA512

    14c0ad0c1aa7240cc6509af5cd30b4e28cb6a3619715ea518cdec9018bdfd7d589260ece0f9991dd558069d49551b4c9ca80cfed105396586c3b0f88667a90fb

  • SSDEEP

    49152:vL2WrgyYRhEhqLpAL0GlargNtYafIj/fWC2+Xa0:vHrgyUE+pSlkUo/

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2