Overview
overview
4Static
static
1.SIGN.RSA....sa.pub
windows7-x64
4.SIGN.RSA....sa.pub
windows10-2004-x64
3usr/bin/tailscale
ubuntu-18.04-amd64
usr/bin/tailscale
debian-9-armhf
usr/bin/tailscale
debian-9-mips
usr/bin/tailscale
debian-9-mipsel
usr/sbin/tailscaled
ubuntu-18.04-amd64
usr/sbin/tailscaled
debian-9-armhf
usr/sbin/tailscaled
debian-9-mips
usr/sbin/tailscaled
debian-9-mipsel
Static task
static1
Behavioral task
behavioral3
Sample
usr/bin/tailscale
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral4
Sample
usr/bin/tailscale
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral5
Sample
usr/bin/tailscale
Resource
debian9-mipsbe-20230831-en
Behavioral task
behavioral6
Sample
usr/bin/tailscale
Resource
debian9-mipsel-20230831-en
Behavioral task
behavioral7
Sample
usr/sbin/tailscaled
Resource
ubuntu1804-amd64-20230831-en
Behavioral task
behavioral8
Sample
usr/sbin/tailscaled
Resource
debian9-armhf-20230831-en
Behavioral task
behavioral9
Sample
usr/sbin/tailscaled
Resource
debian9-mipsbe-en-20211208
Behavioral task
behavioral10
Sample
usr/sbin/tailscaled
Resource
debian9-mipsel-en-20211208
General
-
Target
b959cf2eea5e564e5cf91263621a20d6493c92e44ba6ec15fb5a1853e3bc7b48.apk.zip
-
Size
11.8MB
-
MD5
aa93845be67a36d40a48d43f74cb1189
-
SHA1
57e4eccb2ab672df05a013a009f33fc05b435b52
-
SHA256
e505f28976e9d63d3f3641eca0c532d83600a4a819c852cfd99eb78df6e9fcd2
-
SHA512
6c3961eaeb5c7d911ce7cc945ab6ed4d6d859568a467ea971dbd16fe14564dca68e26173b696ad15b49c0af0c7389f7d085e3830851a00f6427408ea8e00fd1d
-
SSDEEP
196608:hbEP1Dm2woSXehQAGkt9r0gywPHjJcrP6PdSKFMdnCwLdTQwhW:hbu1Dm2wqA7w/KrZarMTVM
Malware Config
Signatures
Files
-
b959cf2eea5e564e5cf91263621a20d6493c92e44ba6ec15fb5a1853e3bc7b48.apk.zip.zip
Password: infected
-
b959cf2eea5e564e5cf91263621a20d6493c92e44ba6ec15fb5a1853e3bc7b48.apk.gz
-
b959cf2eea5e564e5cf91263621a20d6493c92e44ba6ec15fb5a1853e3bc7b48.apk.tar
-
.PKGINFO
-
-
etc/logrotate.d/tailscale
-
usr/bin/tailscale.elf linux riscv
-
usr/lib/modules-load.d/tailscale.conf
-
usr/sbin/tailscaled.elf linux riscv