General

  • Target

    JaffaCakes118_5c621f82d8a4230e0a3c5f7ea2ade089cb6833b8e79e9ac98282ad404e32e0af

  • Size

    652.4MB

  • Sample

    241229-rrm15stlfy

  • MD5

    854c81ac5564234495f97f99352c4874

  • SHA1

    e0423bfc8f6eda38703275bf59f7c53d28196bed

  • SHA256

    5c621f82d8a4230e0a3c5f7ea2ade089cb6833b8e79e9ac98282ad404e32e0af

  • SHA512

    f6d5aacfc51982e809709f4dac98309940f45aad235be92e74dfcf87b80c7dc5d0b6f5d08af920b33722a0052ae7502e3da2b460692e663e7cfb63ae3870b804

  • SSDEEP

    49152:2WhTeD8k0uh22L2BVsjlS88GTuaayup8jBT67o0+WGpTC67:2WhTeAAhcBCs88jyuuBCob1C67

Malware Config

Extracted

Family

laplas

C2

clipper.guru

Attributes
  • api_key

    b5f27c37558531cf78bce8922773aaa833cdccae51258e138ceb788888acb88d

Targets

    • Target

      JaffaCakes118_5c621f82d8a4230e0a3c5f7ea2ade089cb6833b8e79e9ac98282ad404e32e0af

    • Size

      652.4MB

    • MD5

      854c81ac5564234495f97f99352c4874

    • SHA1

      e0423bfc8f6eda38703275bf59f7c53d28196bed

    • SHA256

      5c621f82d8a4230e0a3c5f7ea2ade089cb6833b8e79e9ac98282ad404e32e0af

    • SHA512

      f6d5aacfc51982e809709f4dac98309940f45aad235be92e74dfcf87b80c7dc5d0b6f5d08af920b33722a0052ae7502e3da2b460692e663e7cfb63ae3870b804

    • SSDEEP

      49152:2WhTeD8k0uh22L2BVsjlS88GTuaayup8jBT67o0+WGpTC67:2WhTeAAhcBCs88jyuuBCob1C67

    • Laplas Clipper

      Laplas is a crypto wallet stealer with three variants written in Golang, C#, and C++.

    • Laplas family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks