General

  • Target

    tailscale-setup-full-1.74.0.exe

  • Size

    64.0MB

  • Sample

    240921-24eweayhra

  • MD5

    a2d870d2f4a6e6f9971ead293b44e530

  • SHA1

    b05d3da1df50d8a14f2092b680f9fd6ee507c3f8

  • SHA256

    54eba2001cbf568de4c9fd72c1a9810ba09b077686798b2fcd7b7c54980c2e92

  • SHA512

    a148afeb100fac5b63aaf0f2c966a2c124d5065627545b9eb38cf2636f49a9195001d96df72e3acf71e55b8247a218f3d7db8e61e31ced3ccc14c610a6d970c2

  • SSDEEP

    1572864:EPVBBFHiPvkYVTlhye4v6qsboWfwRbUU/ROa4pDvkFf97i1WP1AT:W9CnHVTlhye4vts8Wf2YU/ROaWT8V7iF

Malware Config

Targets

    • Target

      tailscale-setup-full-1.74.0.exe

    • Size

      64.0MB

    • MD5

      a2d870d2f4a6e6f9971ead293b44e530

    • SHA1

      b05d3da1df50d8a14f2092b680f9fd6ee507c3f8

    • SHA256

      54eba2001cbf568de4c9fd72c1a9810ba09b077686798b2fcd7b7c54980c2e92

    • SHA512

      a148afeb100fac5b63aaf0f2c966a2c124d5065627545b9eb38cf2636f49a9195001d96df72e3acf71e55b8247a218f3d7db8e61e31ced3ccc14c610a6d970c2

    • SSDEEP

      1572864:EPVBBFHiPvkYVTlhye4v6qsboWfwRbUU/ROa4pDvkFf97i1WP1AT:W9CnHVTlhye4vts8Wf2YU/ROaWT8V7iF

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks