Extracted

• • Target

    JaffaCakes118_48ad9f289de82a58b3b390f4b6b1efe6e756e2a2ff885330bc67be387c924e82

  • Size

    743.2MB

  • MD5

    b68992b9be1f32714012077281d32ae5

  • SHA1

    ada549e2149aa98d23698ce83cb2bfbd7a0733d7

  • SHA256

    48ad9f289de82a58b3b390f4b6b1efe6e756e2a2ff885330bc67be387c924e82

  • SHA512

    91563d3fa41ef36e011893d7d8f28b0f07fafc7e18baaf00457bc9fb29ab58e0b65bc9c635f86d0411ff6c74e928bfc023dffa446dae259f2c562c1d625b6d02

  • SSDEEP

    12582912:WeWtmxGq+R7PARz/CH2YQs8crIrBHKQeWVtZ+eCf6GcvcdJSClWizwdpqqXidmP:WfsGLP+z/M2YQs88Wpek26qdJSC8zdMQ

  Score

  10^/10

  laplasclipperdiscoverystealer

  • Laplas Clipper

    Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    stealerclipperlaplas

  • Laplas family

    laplas

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2