Overview

overview

10

Static

static

7

badf6c49e4...98.exe

windows7-x64

10

badf6c49e4...98.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26dbb8cdc46ecf186fe07605207bf622.bin

  • Size

    5.9MB

  • Sample

    230828-bhgj1agb8t

  • MD5

    c1d09302b4ef65512a2576e44f2a7c2d

  • SHA1

    dfed3cfddf321d0f6de1b648fb0664f9295d43bd

  • SHA256

    fa3cd18198b639bed6d19f3ecbb4cc3d3b834c6926066caac9e0acb2003cd1fe

  • SHA512

    d749ee0b3e642efd1cd1e05f445ff29ab0ec3685a495ffc8d124b5417877f2a7eb29d73a173f84c9a40454d6c09a5bd5c3f99e643901ec1eca9db985b6c5f335

  • SSDEEP

    98304:Gg7LTI6xSijZbh3OCm+3KSKNavWbkZMADg0Gdtyg0TUmCSspMVRktKUAfZAK6rbS:l7LYshh7m+tebqDXGaHpspM7ktKpfOvS

Score
10/10
laplasclipperstealerthemida

Malware Config

Targets

    • Target

      badf6c49e41bef9c00e665b7273b2e8d712abb6e463e451c39d33494eb02bd98.bin

    • Size

      9.7MB

    • MD5

      26dbb8cdc46ecf186fe07605207bf622

    • SHA1

      916e3e9f55205fbd45ec1fbb47db370d4f668d18

    • SHA256

      badf6c49e41bef9c00e665b7273b2e8d712abb6e463e451c39d33494eb02bd98

    • SHA512

      f20a3f64747f61b4b8aebc04309ebd2b6490ec0c8d0d4a974a2ccbe730ec89681e1bfcf80c054efd6e49cc1931feac31859a3c0a3795c6ae7c8a90a0d1e7743f

    • SSDEEP

      98304:zvw0Hotqx1pWuJ56DdIPqDyj/pCu03o8I6v+5/QGJbY9YAq+6FLiX:zY0Hotqx1EA56hLnr48IH/HK186

    Score
    10/10
    laplasclipperstealerthemida

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

      stealerclipperlaplas

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks