General

  • Target

    727ab7ab3fbcea9b9ace8552393f06ca837c9b1905772de1be3a263149f55210

  • Size

    1.9MB

  • Sample

    230321-q9m87aag87

  • MD5

    9e02c05696e63e53f6f7a8fc7bf9e5ca

  • SHA1

    83d17724e64973eb938926e8ccce0fa4911fafb8

  • SHA256

    727ab7ab3fbcea9b9ace8552393f06ca837c9b1905772de1be3a263149f55210

  • SHA512

    767596c377a656b326bf922cb2fdb96d675590b4974c654fc5b501924b035638d07124224fcdba00a4f7671917918abb216a4d8c5e2bc566a1578c21bc694bb0

  • SSDEEP

    49152:Y+71etUQLLzlGXS4V+B4lVa9X7j/sLXKT4NJfhO3:Y+71etUQLflGXSBsL6sNJfhI

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      727ab7ab3fbcea9b9ace8552393f06ca837c9b1905772de1be3a263149f55210

    • Size

      1.9MB

    • MD5

      9e02c05696e63e53f6f7a8fc7bf9e5ca

    • SHA1

      83d17724e64973eb938926e8ccce0fa4911fafb8

    • SHA256

      727ab7ab3fbcea9b9ace8552393f06ca837c9b1905772de1be3a263149f55210

    • SHA512

      767596c377a656b326bf922cb2fdb96d675590b4974c654fc5b501924b035638d07124224fcdba00a4f7671917918abb216a4d8c5e2bc566a1578c21bc694bb0

    • SSDEEP

      49152:Y+71etUQLLzlGXS4V+B4lVa9X7j/sLXKT4NJfhO3:Y+71etUQLflGXSBsL6sNJfhI

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks