General

  • Target

    4b8c8646cd4c8e21217281a7c2155d9821126f1f7594e43b29c402a4a33b6d80

  • Size

    1.9MB

  • Sample

    230321-qh3jssad47

  • MD5

    78804a23aeb68beb488a3cc4b2181935

  • SHA1

    ce08cacdbb4ce93c487d452f967a6aff73ba614e

  • SHA256

    4b8c8646cd4c8e21217281a7c2155d9821126f1f7594e43b29c402a4a33b6d80

  • SHA512

    b70bfbe64e19d37a2be5e082d69e8b68caa6dfc13a337acbd9c8b6a6ea1e790aec1395acbb62a07b44ea56a833a99877d8f9a03b4b5a9031bb0641940e9ac621

  • SSDEEP

    49152:kYOWavOzMz0Ls8b71Iz34gc7fQzGBliwRG:kjWakw0j1Iz34PUii6G

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      4b8c8646cd4c8e21217281a7c2155d9821126f1f7594e43b29c402a4a33b6d80

    • Size

      1.9MB

    • MD5

      78804a23aeb68beb488a3cc4b2181935

    • SHA1

      ce08cacdbb4ce93c487d452f967a6aff73ba614e

    • SHA256

      4b8c8646cd4c8e21217281a7c2155d9821126f1f7594e43b29c402a4a33b6d80

    • SHA512

      b70bfbe64e19d37a2be5e082d69e8b68caa6dfc13a337acbd9c8b6a6ea1e790aec1395acbb62a07b44ea56a833a99877d8f9a03b4b5a9031bb0641940e9ac621

    • SSDEEP

      49152:kYOWavOzMz0Ls8b71Iz34gc7fQzGBliwRG:kjWakw0j1Iz34PUii6G

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks