Extracted

Extracted

• • Target

    83a7f9488aa65bdf7d74aac8ce9ce3468725a40a26bc2c560758473403f99616.exe

  • Size

    1.8MB

  • MD5

    a00e64fb477f056d15dcbceb861f8439

  • SHA1

    cc43e797973ac8dccec3f28c7090942804f5a271

  • SHA256

    83a7f9488aa65bdf7d74aac8ce9ce3468725a40a26bc2c560758473403f99616

  • SHA512

    588f594c915df09aaad467a31648852f5279afef0706243560266dc3adc591d18860f052bb557a3da62c6b425dde68d45162f161da75b30ba6fdfcabc7d0c2fb

  • SSDEEP

    49152:aTDjb1Kvdt+v7Bg98vR7NWvT+V6G/XW/yjhw4:aTPbsFtJ857NWL+8G/8yFh

  Score

  10^/10

  laplasclipperpersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1behavioral2