Extracted

• • Target

    JaffaCakes118_5a428ad80b5e9a5204b238dca8617696d2d4efbdc07366d5c897405b24782689

  • Size

    688.3MB

  • MD5

    c074776efe5f5e01133668620cd4bd4a

  • SHA1

    8bba29b1e9967e1462678d3b9c1b0dd9e4ff5769

  • SHA256

    5a428ad80b5e9a5204b238dca8617696d2d4efbdc07366d5c897405b24782689

  • SHA512

    2c53101f3351c52ee503f58793ae09f77459f34316c66767d88fe156f677eeb0fd82e1410ef4b9a9f4e974b1240d21ada4810619b232a44bc15bb0095b85c454

  • SSDEEP

    12582912:1BfUe4f+Di3T5/E/sqc6P2dEPXXopPsGv7jVyntuJ6Hp0pOE:16e4TNE/sHEfXouS7jYtHLE

  Score

  10^/10

  laplasclipperdiscoverystealervmprotect

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Laplas family

    laplas

  • Executes dropped EXE

  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  behavioral1behavioral2