General

  • Target

    3a4712fe53943012eabe3d9b70436588be5f7d3b5d2c6abeaf3070e26cb4eafb

  • Size

    1.8MB

  • Sample

    230411-l7tkzadd9y

  • MD5

    484f306b6b2cddfa346936023aa886a5

  • SHA1

    8b6a851469319d5b1df0449775aa95b0138d8a8c

  • SHA256

    3a4712fe53943012eabe3d9b70436588be5f7d3b5d2c6abeaf3070e26cb4eafb

  • SHA512

    542eb0acd401d52fcea808e248a32f6f4c929f7a31eb9a5c6c6d04555ad9f1b30fdd15f1e71c9701c25efbd2cf562da0f39f3b423db854a324a711f2f0a7ceb5

  • SSDEEP

    49152:BMZrwVqn+0E3OcR+SpxJfwYRZlO2Hcke4fwv9OaOzrWc1ifUzvL+a:KMVqn+OcR1pxRZlO2Hcv9OrWc1iO

Malware Config

Extracted

Family

laplas

C2

http://45.159.189.105

Attributes
  • api_key

    0be23a6bec914a7d28f1aae995f036fdba93224093ddb48d02fe43e814862f4e

Targets

    • Target

      3a4712fe53943012eabe3d9b70436588be5f7d3b5d2c6abeaf3070e26cb4eafb

    • Size

      1.8MB

    • MD5

      484f306b6b2cddfa346936023aa886a5

    • SHA1

      8b6a851469319d5b1df0449775aa95b0138d8a8c

    • SHA256

      3a4712fe53943012eabe3d9b70436588be5f7d3b5d2c6abeaf3070e26cb4eafb

    • SHA512

      542eb0acd401d52fcea808e248a32f6f4c929f7a31eb9a5c6c6d04555ad9f1b30fdd15f1e71c9701c25efbd2cf562da0f39f3b423db854a324a711f2f0a7ceb5

    • SSDEEP

      49152:BMZrwVqn+0E3OcR+SpxJfwYRZlO2Hcke4fwv9OaOzrWc1ifUzvL+a:KMVqn+OcR1pxRZlO2Hcv9OrWc1iO

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks