Overview

overview

10

Static

static

1

eb9e358c4d...02.exe

windows7-x64

10

eb9e358c4d...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdd49eb42688886ee312ae57d9d1f654.bin

  • Size

    1.7MB

  • Sample

    230320-b1xnyabb66

  • MD5

    aa470163b665d56570b414cb936a0757

  • SHA1

    057b05926f7bd95002b4d7f6e514daa5ad2f0ff1

  • SHA256

    94654f322afbdfdc2d910b89f74f7240fbd30efb90b1890640137287c7620abf

  • SHA512

    f8a9eaf958810c4e88797de43c156a9ddc3aded44e82a10be15fdcaed28f5ad54b0b72d2954f4361c97b8172885378b6a2c3d57c93af1fef9490791c0420d3c7

  • SSDEEP

    24576:KaJChEhWVNgnYqQ1U4whUzUr4NbfV1D4XniavAYyYqR/u0KbIwhTopk4o3PXYdNe:Kl6U1UogQXDT8AtYqR/3KbIQa2/Qu

Score
10/10
laplasclipperpersistencestealer

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      eb9e358c4d722aff74cbcf3a4f7c11a69aad1c80e93f52f75ad94d5e4a29db02.exe

    • Size

      1.9MB

    • MD5

      bdd49eb42688886ee312ae57d9d1f654

    • SHA1

      9fa1b8eb6b546d78150324b2303b9425b8f23dc5

    • SHA256

      eb9e358c4d722aff74cbcf3a4f7c11a69aad1c80e93f52f75ad94d5e4a29db02

    • SHA512

      6bb152f179c781a26107e9f3e2084f2e70fc15835c30d40cfc27d3d354ebb3214851a9cd350f1504b151fa792c5ac8d6290f3b4da5c8839ee3b759766e92a586

    • SSDEEP

      49152:fzmvpQccgreskIaAUgrqgHkrWIF994X5IBY:fzOJtqgHkVoIB

    Score
    10/10
    laplasclipperpersistencestealer

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

      stealerclipperlaplas

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks