laplas | 8c2bc73bbfd4e45cc3fe5acbe355275d46ab1bc2afeed7b5f35eb208569f58dd | Triage

Sharing

General

Target

8c2bc73bbfd4e45cc3fe5acbe355275d46ab1bc2afeed7b5f35eb208569f58dd
Size

1.8MB
Sample

230322-e2xxwagg8w
MD5

b2981c0d4bbc2d6c518e591298bad272
SHA1

385648e72e97b53ff60cf4e34deef032d77ea15c
SHA256

8c2bc73bbfd4e45cc3fe5acbe355275d46ab1bc2afeed7b5f35eb208569f58dd
SHA512

101110a6df97591fe1a0212f07c67bdab35010462912ba8dfc4166fcb88963439d86e92928b6d2b854ec4c788a6b8f23637b7e5e6cf56400af917b58bcd57b57
SSDEEP

49152:gMSkXTIi1xHOAmvTzAup/KXgsQ27Ne6wuGq+QyHG/50k9ic3FK:gMSkXJFazZGwuGq1MG/yk9ic3M

Score

10^/10

laplas clipper persistence stealer

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes

api_key
1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

- Target
  
  8c2bc73bbfd4e45cc3fe5acbe355275d46ab1bc2afeed7b5f35eb208569f58dd
- Size
  
  1.8MB
- MD5
  
  b2981c0d4bbc2d6c518e591298bad272
- SHA1
  
  385648e72e97b53ff60cf4e34deef032d77ea15c
- SHA256
  
  8c2bc73bbfd4e45cc3fe5acbe355275d46ab1bc2afeed7b5f35eb208569f58dd
- SHA512
  
  101110a6df97591fe1a0212f07c67bdab35010462912ba8dfc4166fcb88963439d86e92928b6d2b854ec4c788a6b8f23637b7e5e6cf56400af917b58bcd57b57
- SSDEEP
  
  49152:gMSkXTIi1xHOAmvTzAup/KXgsQ27Ne6wuGq+QyHG/50k9ic3FK:gMSkXJFazZGwuGq1MG/yk9ic3M
Score

10^/10

laplas clipper persistence stealer
- Laplas Clipper
  Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.
  stealer clipper laplas
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

laplasclipperpersistencestealer