Extracted

• • Target

    setup.exe

  • Size

    1.9MB

  • MD5

    c744e2d74b828c767877c52e125087af

  • SHA1

    444809a0b355b365fadc03e50ac577b1b1fa50eb

  • SHA256

    dccb7a134aae7970fc13ab3db3737b62b733ba33627945a1d5cdf61870ff4842

  • SHA512

    084e0f42ecb98a1915db1128a704a1650b07e7acffc4852cadc9684dfd643619e1668ab7ef83321483a2eaeadcd83e58379cd4db3e11a4085d74ee42bb095fff

  • SSDEEP

    49152:xKcn0Cjj3zONh6qrCf2TXEUPsNq3WVAThDWZaXQZh8:ocdDZqCIbPzWVyhDWZaXQZh

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2