Overview

overview

10

Static

static

3

47c1302a63...17.exe

windows7-x64

10

47c1302a63...17.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47c1302a6362defa7ae3e1d9f3f67059fc147677fdac70aa394583280ff54017

  • Size

    5.8MB

  • Sample

    230918-d5vq9aeg8s

  • MD5

    52fe687ddad6e72d8c9f79b94543cb28

  • SHA1

    ca3771cdc25a4c3618d6746d9bae20c8a0dc48c1

  • SHA256

    47c1302a6362defa7ae3e1d9f3f67059fc147677fdac70aa394583280ff54017

  • SHA512

    598fa486cae36ddcec368005b401da74c7c3a08586fd5995948bd9261bfadaa4d7eb4b9306bfdc99cdfc09fe93579164ba67dd090e3f6f0cc689bbdae586e8d7

  • SSDEEP

    98304:dFMwKUb75oO8EL2TJgmgUiN+RJ/BC09WXSEKbSFa+UKiUsf+DltYg4:dFMwtPm/Em3x0cJ/BCmWzcKiXUltY

Score
10/10
laplasclipperstealer

Malware Config

Extracted

Family

laplas

C2

45.159.188.158

Attributes
  • api_key

    d1a05de376c0be1daa56dfb2715c8a0c5df8a111b8b31decc886df1e48db7c9c

Targets

    • Target

      47c1302a6362defa7ae3e1d9f3f67059fc147677fdac70aa394583280ff54017

    • Size

      5.8MB

    • MD5

      52fe687ddad6e72d8c9f79b94543cb28

    • SHA1

      ca3771cdc25a4c3618d6746d9bae20c8a0dc48c1

    • SHA256

      47c1302a6362defa7ae3e1d9f3f67059fc147677fdac70aa394583280ff54017

    • SHA512

      598fa486cae36ddcec368005b401da74c7c3a08586fd5995948bd9261bfadaa4d7eb4b9306bfdc99cdfc09fe93579164ba67dd090e3f6f0cc689bbdae586e8d7

    • SSDEEP

      98304:dFMwKUb75oO8EL2TJgmgUiN+RJ/BC09WXSEKbSFa+UKiUsf+DltYg4:dFMwtPm/Em3x0cJ/BCmWzcKiXUltY

    Score
    10/10
    laplasclipperstealer

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

      stealerclipperlaplas

    • Sliver 32-bit implant (with and without --debug flag at compile)

      slive 32bit malware detected.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks