General

  • Target

    Clip1.exe

  • Size

    9.7MB

  • Sample

    230826-zq1jvadb96

  • MD5

    26dbb8cdc46ecf186fe07605207bf622

  • SHA1

    916e3e9f55205fbd45ec1fbb47db370d4f668d18

  • SHA256

    badf6c49e41bef9c00e665b7273b2e8d712abb6e463e451c39d33494eb02bd98

  • SHA512

    f20a3f64747f61b4b8aebc04309ebd2b6490ec0c8d0d4a974a2ccbe730ec89681e1bfcf80c054efd6e49cc1931feac31859a3c0a3795c6ae7c8a90a0d1e7743f

  • SSDEEP

    98304:zvw0Hotqx1pWuJ56DdIPqDyj/pCu03o8I6v+5/QGJbY9YAq+6FLiX:zY0Hotqx1EA56hLnr48IH/HK186

Malware Config

Targets

    • Target

      Clip1.exe

    • Size

      9.7MB

    • MD5

      26dbb8cdc46ecf186fe07605207bf622

    • SHA1

      916e3e9f55205fbd45ec1fbb47db370d4f668d18

    • SHA256

      badf6c49e41bef9c00e665b7273b2e8d712abb6e463e451c39d33494eb02bd98

    • SHA512

      f20a3f64747f61b4b8aebc04309ebd2b6490ec0c8d0d4a974a2ccbe730ec89681e1bfcf80c054efd6e49cc1931feac31859a3c0a3795c6ae7c8a90a0d1e7743f

    • SSDEEP

      98304:zvw0Hotqx1pWuJ56DdIPqDyj/pCu03o8I6v+5/QGJbY9YAq+6FLiX:zY0Hotqx1EA56hLnr48IH/HK186

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

MITRE ATT&CK Enterprise v15

Tasks