General

  • Target

    a38740f27d72f631a071f9b8d4707b4c.exe

  • Size

    238KB

  • Sample

    230505-xfdk8aeg55

  • MD5

    a38740f27d72f631a071f9b8d4707b4c

  • SHA1

    3dae530f1fa4329bdb10d79ae20fa56e77b19ae5

  • SHA256

    967c720bf123abc4385306cd0ce6c25fa515b2c107c2ae6f670e4d863912a660

  • SHA512

    da87468cebb4f835c6b5ca84bdef1852ec242e269173f344c85bab821e974dda16f7ce1d07c72c94916b8a59fade6e053a8bea3381e7702789ce5870c312e735

  • SSDEEP

    6144:yKvu7/cjSdN2K5YU13i3o4Ms2eXAOt3va:yQEgSdNjeXby

Malware Config

Extracted

Family

laplas

C2

http://65.109.140.234

Attributes
  • api_key

    df447cf68e10f5a0e77c16bf0c96d9b97c6c34c9cb2157c2676b9d321b5633cc

Targets

    • Target

      a38740f27d72f631a071f9b8d4707b4c.exe

    • Size

      238KB

    • MD5

      a38740f27d72f631a071f9b8d4707b4c

    • SHA1

      3dae530f1fa4329bdb10d79ae20fa56e77b19ae5

    • SHA256

      967c720bf123abc4385306cd0ce6c25fa515b2c107c2ae6f670e4d863912a660

    • SHA512

      da87468cebb4f835c6b5ca84bdef1852ec242e269173f344c85bab821e974dda16f7ce1d07c72c94916b8a59fade6e053a8bea3381e7702789ce5870c312e735

    • SSDEEP

      6144:yKvu7/cjSdN2K5YU13i3o4Ms2eXAOt3va:yQEgSdNjeXby

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks