General

  • Target

    2044-59-0x00000000031D0000-0x00000000035D3000-memory.dmp

  • Size

    4.0MB

  • MD5

    b3ea9c9cb9ff74d397b62fb89b161613

  • SHA1

    adc069a9bffcb1c178d026bcb408bd326b7bc393

  • SHA256

    bffa1c785fab0914dd9b8b4fbdb7faa3a34ea4e5352e0c94fc29e1d72c1bba8e

  • SHA512

    bf4586170e2cad217942e48799ffa63a70d57a11372849d1d45c098e664f3cb80c96b948fd14c236c6f56665c5c72c5df8d655b01e92a8ab0dc1fb25502f34d7

  • SSDEEP

    49152:56N8BICR7NWm8qpHXALjaQjiBDo+IPF5pDRXEmb0VF1BL:56NB/aa+upDRXOL

Score
10/10

Malware Config

Extracted

Family

laplas

C2

http://194.15.216.30

Attributes
  • api_key

    57728dce0f7018e17faf9f061cb2d77048e08414376baf6d860b78e74e83c208

Signatures

  • Laplas family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2044-59-0x00000000031D0000-0x00000000035D3000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections