General

  • Target

    CLEPexe.exe

  • Size

    4.6MB

  • Sample

    230701-htrbxafh52

  • MD5

    2b3bff5880cb5d9ab44c302bd1047313

  • SHA1

    8cf83c7e71254a6ca5d40d58470897479c49e4c3

  • SHA256

    e65f40ce3d58d2634807945b468acf0fbc3f6b06631d499dcd99536ed4fae4bc

  • SHA512

    c3d46ca94eb85db7614f0c9ad57d5ab2afe380e5ae57b6967795d285936ee9133439010ddd3bd28267e203bb396062192cd3398092e2f37f46fa2be5aff426b4

  • SSDEEP

    49152:l7LFs2B0KVUUzpyZ9vAaE5FKY/t76oUz7UQqAOiyjrbsnHzvSP9rsvl/m9NjJTnP:RpsC/VyZpoUzJqTknTRQdXOY

Score
10/10

Malware Config

Extracted

Family

laplas

C2

clipper.guru

Attributes
  • api_key

    5ef1aac7b3430729f6cbc95fb4d2d2a62582e7382955ffc87026077cb28ab31e

Targets

    • Target

      CLEPexe.exe

    • Size

      4.6MB

    • MD5

      2b3bff5880cb5d9ab44c302bd1047313

    • SHA1

      8cf83c7e71254a6ca5d40d58470897479c49e4c3

    • SHA256

      e65f40ce3d58d2634807945b468acf0fbc3f6b06631d499dcd99536ed4fae4bc

    • SHA512

      c3d46ca94eb85db7614f0c9ad57d5ab2afe380e5ae57b6967795d285936ee9133439010ddd3bd28267e203bb396062192cd3398092e2f37f46fa2be5aff426b4

    • SSDEEP

      49152:l7LFs2B0KVUUzpyZ9vAaE5FKY/t76oUz7UQqAOiyjrbsnHzvSP9rsvl/m9NjJTnP:RpsC/VyZpoUzJqTknTRQdXOY

    Score
    10/10
    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks