Extracted

• • Target

    0x000a000000023b66-19

  • Size

    3.2MB

  • MD5

    6965c7c82a2f2c3fb640366f28858ec3

  • SHA1

    af31705cf66d7666bb39dbfbb88721939577a4d1

  • SHA256

    ad14c9e431de085972ac745e5a3ee13119cc13e2287db7edfcdae4261ded7b24

  • SHA512

    42db28f3d87f32cf67ccf24b84ec41c7f0185bf3d6a3116940ecd797f5fb44463cfc5be751382a29e2e94538b067dfb79279b0c0c5938f42ee5e7fd2492de88c

  • SSDEEP

    98304:BtUYhuUV2r6lU36yLc2Tp64Lc7PSwxWnF:BSYhPID64Tpzc7Swo

  Score

  10^/10

  laplasclipperdiscoverypersistencestealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Executes dropped EXE

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2