General

  • Target

    e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab

  • Size

    6.1MB

  • Sample

    241206-eaqdqayke1

  • MD5

    48978e12606c69a14525441154e7bfd5

  • SHA1

    7402deebde1bb439be4c938458f9139ff8ba16ce

  • SHA256

    e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab

  • SHA512

    08f7389f19c51b0070c87a129068867cdb1ea24d768ed29001796290182fa1fcb9a3a9a1fc1cd22c49ff251e0366f5dd380ddac7c64e08a2851f8cea287fe9f1

  • SSDEEP

    98304:dSPwB+aOipCWBR6K4OIiGMprhRp8kBdQ9UEUvQxXf1tpqinVruk:vB+aOiDUKzDrhQLZK0f1tQpk

Malware Config

Extracted

Family

laplas

C2

clipper.guru

Attributes
  • api_key

    7ee57b1f6d4aff08f9755119b18cf0754b677addcb6a3063066112b10a357a8e

Targets

    • Target

      e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab

    • Size

      6.1MB

    • MD5

      48978e12606c69a14525441154e7bfd5

    • SHA1

      7402deebde1bb439be4c938458f9139ff8ba16ce

    • SHA256

      e785e87f0e16a7b52ec8a725dcb048e6310532c9c535dfef70b0d969a4dd85ab

    • SHA512

      08f7389f19c51b0070c87a129068867cdb1ea24d768ed29001796290182fa1fcb9a3a9a1fc1cd22c49ff251e0366f5dd380ddac7c64e08a2851f8cea287fe9f1

    • SSDEEP

      98304:dSPwB+aOipCWBR6K4OIiGMprhRp8kBdQ9UEUvQxXf1tpqinVruk:vB+aOiDUKzDrhQLZK0f1tQpk

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Laplas family

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

MITRE ATT&CK Enterprise v15

Tasks