General

  • Target

    2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820

  • Size

    726.0MB

  • Sample

    230320-elnn9sbg24

  • MD5

    c3a17b0e7d83d4eff77f17b5ce764e14

  • SHA1

    accbe20f2588372910baac8636d60719d7a6b56f

  • SHA256

    2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820

  • SHA512

    86334bf19f9179d440e68bbf8ab4fd11ee45bd6015f8d6842cf87c0e98086528adc8da033bcca39c7f4fed76f18e4dcb4e68820745158580681e1e9b47c1e7bd

  • SSDEEP

    196608:FVi+d3U/4jzIVa48fwWTL7oO30d/3qMbElQ:rP6qzIVa4uwWTX+fqMbT

Malware Config

Extracted

Family

laplas

C2

http://212.113.106.172

Attributes
  • api_key

    a8f23fb9332db9a7947580ee498822bfe375b57ad7eb47370c7209509050c298

Targets

    • Target

      2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820

    • Size

      726.0MB

    • MD5

      c3a17b0e7d83d4eff77f17b5ce764e14

    • SHA1

      accbe20f2588372910baac8636d60719d7a6b56f

    • SHA256

      2dd1f46406e90b8b57ac49bdba45e4f279db5604921df3921f945e72c28d6820

    • SHA512

      86334bf19f9179d440e68bbf8ab4fd11ee45bd6015f8d6842cf87c0e98086528adc8da033bcca39c7f4fed76f18e4dcb4e68820745158580681e1e9b47c1e7bd

    • SSDEEP

      196608:FVi+d3U/4jzIVa48fwWTL7oO30d/3qMbElQ:rP6qzIVa4uwWTX+fqMbT

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks