General
- Target Tailbound.exe
- Size 5.5MB
- Sample260629-2wf4haas5p
- SHA256 2a280ddcbf52b78eee0a68c304f29c13a008b106fea83a1f5afe761bc1ac1342
- MD5 1412a853fc16d9a899e4b046196b3116
- SHA1 eb2d7b75e07b96e5f857e5a42bca5b092e3d5f02
- SHA512 5af2ecd61a6a956a10bf68a72e94be6f94e7bb4e0d485268609fc14582a0df92d5588ae46bda01f44a6c6f8b59fde40dfa113345d6b9f8da2826fbf8319a97bc
- SSDEEP 98304:zvkmYxVr+NzDNll5WLsrLtBCiJV8aZUJW0TI/8uNng0mGQGGawMdByJjRWL+9RW3:btYxVr+NzDNll5WLsrLtBCiJVcJnI8sl
- TLSH T1AC468D80BA52C162E0422574F4AE76FB69382D04CF18C6E7F3E43E2D79705DC6AB715A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tailbound.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tailbound.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Tailbound.exe
- Size 5.5MB
- SHA256 2a280ddcbf52b78eee0a68c304f29c13a008b106fea83a1f5afe761bc1ac1342
- MD5 1412a853fc16d9a899e4b046196b3116
- SHA1 eb2d7b75e07b96e5f857e5a42bca5b092e3d5f02
- SHA512 5af2ecd61a6a956a10bf68a72e94be6f94e7bb4e0d485268609fc14582a0df92d5588ae46bda01f44a6c6f8b59fde40dfa113345d6b9f8da2826fbf8319a97bc
- SSDEEP 98304:zvkmYxVr+NzDNll5WLsrLtBCiJV8aZUJW0TI/8uNng0mGQGGawMdByJjRWL+9RW3:btYxVr+NzDNll5WLsrLtBCiJVcJnI8sl
- TLSH T1AC468D80BA52C162E0422574F4AE76FB69382D04CF18C6E7F3E43E2D79705DC6AB715A
- MD5 SHA1 SHA512 SSDEEP TLSH
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.