General

  • Target

    4ca3dbb5395f00dd3e6a76add2069626e3db6222be3b8bba9a29444c5960f47f

  • Size

    1.9MB

  • Sample

    230319-y5jn7sca71

  • MD5

    aa3321fbcbc033da9e097aacf740fdc5

  • SHA1

    e9ecea40f56118e22d2d2bd53588d53804b2e91f

  • SHA256

    4ca3dbb5395f00dd3e6a76add2069626e3db6222be3b8bba9a29444c5960f47f

  • SHA512

    f8459386d1ec1151b1217587111a14584e2cf3086f2895e9c6ec67a3d50df93d20213e482999895ff9d0f58b3b9311254457a21fd15e14995cba5726758a7caa

  • SSDEEP

    49152:6mylYU6zFfVEiRKX5+7zYNdaHMufOS40NxTmClzh/:6mygzF9tgXU/YvFGOS40NBm8h

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      4ca3dbb5395f00dd3e6a76add2069626e3db6222be3b8bba9a29444c5960f47f

    • Size

      1.9MB

    • MD5

      aa3321fbcbc033da9e097aacf740fdc5

    • SHA1

      e9ecea40f56118e22d2d2bd53588d53804b2e91f

    • SHA256

      4ca3dbb5395f00dd3e6a76add2069626e3db6222be3b8bba9a29444c5960f47f

    • SHA512

      f8459386d1ec1151b1217587111a14584e2cf3086f2895e9c6ec67a3d50df93d20213e482999895ff9d0f58b3b9311254457a21fd15e14995cba5726758a7caa

    • SSDEEP

      49152:6mylYU6zFfVEiRKX5+7zYNdaHMufOS40NxTmClzh/:6mygzF9tgXU/YvFGOS40NBm8h

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks