Overview

overview

10

Static

static

1

5502d7c1c8...3b.exe

windows7-x64

10

5502d7c1c8...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    406a0e14b6569ebc5f1086801e043fe1.bin

  • Size

    1.7MB

  • Sample

    230324-bs9njadd31

  • MD5

    d39563cc42269333059c7322eb43153e

  • SHA1

    ad163da30d08d457c97849c1db00b74941411f4b

  • SHA256

    20cdbfa6a1e3797941b2cce0f9bcb4beadeabd4f83f8faac3fae1fc8b3b92321

  • SHA512

    f6f76347546b629cbed4e0abeb1d3d7eb8ad19267662b8e21b9e5f9a3b97067eb838d8e190e65cf5deda40da9cad65d61895b3b03333134cb52a9a0d204442bd

  • SSDEEP

    49152:A2Bcp58aCRcjECo+fSjb9PD+/QgX50tzQaT:A758SjwjbZK/x50tMaT

Score
10/10
laplasclipperpersistencestealer

Malware Config

Extracted

Family

laplas

C2

http://45.87.154.105

Attributes
  • api_key

    1c630872d348a77d04368d542fde4663bc2bcb96f1b909554db3472c08df2767

Targets

    • Target

      5502d7c1c81714b998f594e523274a828d919f69dc08bffde5fe118918a8f43b.exe

    • Size

      1.8MB

    • MD5

      406a0e14b6569ebc5f1086801e043fe1

    • SHA1

      b15c199f31dcddcd37f10f143b62f2ff998324c6

    • SHA256

      5502d7c1c81714b998f594e523274a828d919f69dc08bffde5fe118918a8f43b

    • SHA512

      f367e8c6a84192925cad8d7de697435220835de2068bf66fa6e29f59680ea4f74dc42b92a6ba16e27bd71194a4104c0a3e06ecd5a2e484473e8ec9669b1ae65a

    • SSDEEP

      49152:VJGty7g6F2SKtEjjbgitUonmkXhDbl0nXj5:VJzpF2SKtEjfBUChTm5

    Score
    10/10
    laplasclipperpersistencestealer

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

      stealerclipperlaplas

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks