Overview

overview

10

Static

static

1

94256992e8...0a.exe

windows7-x64

10

94256992e8...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9eb001d8fc03b5ac327076e5454c1538.bin

  • Size

    1.7MB

  • Sample

    230320-bxqffsdc4t

  • MD5

    4fdbe6736eb06906200d3d5d3c63192d

  • SHA1

    7da959250e739fc3459a8b2356aecbf41a2555b7

  • SHA256

    bce92b4fc25b7adc0fb8548d57be0fa9c245ccb19491c54b0f7ccaca5fa1c4c5

  • SHA512

    684ebf3414050c03e3ce4f616901a31f9ea830446afc4576e42a9ae57b22ae8572053c7b751e30e00c52be45abd3900457cde8279f79809e873f177f9157a9e2

  • SSDEEP

    49152:donUFnDnjn4mBryObYlmomoUZ/iHfrdn4TaUsp:YQjn3lQc/iHfJn4TaUC

Score
10/10
laplasclipperpersistencestealer

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      94256992e8423c5410b140dcedc67b0c8dc79f06ded8c2ec83337885aadf870a.exe

    • Size

      1.9MB

    • MD5

      9eb001d8fc03b5ac327076e5454c1538

    • SHA1

      fd609a4183d2cb6b1091fcdf4d543ea1b5bc7fda

    • SHA256

      94256992e8423c5410b140dcedc67b0c8dc79f06ded8c2ec83337885aadf870a

    • SHA512

      e3822fd0aa77eae9fc06011e888a2164518e436b9e231eb7306997eff7817a15facb250259dcabe629882f5e9fbe0f2aee1128e221ff0f7f1048e6754e443604

    • SSDEEP

      24576:8lnXu/5rLOHsKtiO5LM0GAWYZuTXx7kZ6BZy5A5j5S71Y+/S+a7IeXSLTn14ZoFQ:UXukMAi8BWXzSYOA5j5s1Y+/NuXc14

    Score
    10/10
    laplasclipperpersistencestealer

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

      stealerclipperlaplas

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks