General

  • Target

    b8f2cf76783ff5c0a37c9634bc7d467a4e4fd6a0a0863855189facb12169758a

  • Size

    1.9MB

  • Sample

    230321-r9t76sdf4s

  • MD5

    15c6aba7e0ed4f17fb306502255213b6

  • SHA1

    1ef72d0e935ceb5a7eb44757ce554c0f229030b6

  • SHA256

    b8f2cf76783ff5c0a37c9634bc7d467a4e4fd6a0a0863855189facb12169758a

  • SHA512

    743d8902fa293ddd45f9f3231d491a0388ce0b9fd248638ab9ba64d296d04550cc53560ca2c45eb81eac5bf81f2319433afca59ca85bfffafed51697537b1dba

  • SSDEEP

    49152:mbFd7fbK/pXSm1OAacQOZOAsM/fcjozJcCwAu78BOu2ibtQ:mpljK/pdOAjQJM/ffz2v0giRQ

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      b8f2cf76783ff5c0a37c9634bc7d467a4e4fd6a0a0863855189facb12169758a

    • Size

      1.9MB

    • MD5

      15c6aba7e0ed4f17fb306502255213b6

    • SHA1

      1ef72d0e935ceb5a7eb44757ce554c0f229030b6

    • SHA256

      b8f2cf76783ff5c0a37c9634bc7d467a4e4fd6a0a0863855189facb12169758a

    • SHA512

      743d8902fa293ddd45f9f3231d491a0388ce0b9fd248638ab9ba64d296d04550cc53560ca2c45eb81eac5bf81f2319433afca59ca85bfffafed51697537b1dba

    • SSDEEP

      49152:mbFd7fbK/pXSm1OAacQOZOAsM/fcjozJcCwAu78BOu2ibtQ:mpljK/pdOAjQJM/ffz2v0giRQ

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks