laplas | 178666b82d3f9f6d4785ea5934870cd87d8e19c42b07379556a54e3007625fc3 | Triage

Sharing

General

Target

178666b82d3f9f6d4785ea5934870cd87d8e19c42b07379556a54e3007625fc3
Size

1.9MB
Sample

230321-zhnv3sda75
MD5

e478dd003ab0c8cf0bbe61ffb0b77c3c
SHA1

9e1d30e2ed508b4473061fd46994332246af458e
SHA256

178666b82d3f9f6d4785ea5934870cd87d8e19c42b07379556a54e3007625fc3
SHA512

de4d7fd760acc976f79dd92ebe7a148b2f9787ab611e249815a8af511fa174730b04d143d26f6db384ab929746e441217268cde9b5a14128d4549340f5426d18
SSDEEP

24576:ZHt2b1Jo7ja0mbxvAruakDKnWXb4qx6zNFdN1UDgAiUjl5TMOPdR8feOTkjgRi/5:bwX9l1fDeWrskDgJUzdR8wjT/Sxju

Score

10^/10

laplas clipper persistence stealer

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes

api_key
1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

- Target
  
  178666b82d3f9f6d4785ea5934870cd87d8e19c42b07379556a54e3007625fc3
- Size
  
  1.9MB
- MD5
  
  e478dd003ab0c8cf0bbe61ffb0b77c3c
- SHA1
  
  9e1d30e2ed508b4473061fd46994332246af458e
- SHA256
  
  178666b82d3f9f6d4785ea5934870cd87d8e19c42b07379556a54e3007625fc3
- SHA512
  
  de4d7fd760acc976f79dd92ebe7a148b2f9787ab611e249815a8af511fa174730b04d143d26f6db384ab929746e441217268cde9b5a14128d4549340f5426d18
- SSDEEP
  
  24576:ZHt2b1Jo7ja0mbxvAruakDKnWXb4qx6zNFdN1UDgAiUjl5TMOPdR8feOTkjgRi/5:bwX9l1fDeWrskDgJUzdR8wjT/Sxju
Score

10^/10

laplas clipper persistence stealer
- Laplas Clipper
  Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.
  stealer clipper laplas
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

laplasclipperpersistencestealer