General
- Target tailscale-setup-1.102.2.exe
- Size 1.3MB
- Sample260821-jyez4swcmd
- SHA256 247163eef27acfb5b14bf956b34ab462a73ea7c3ac51bb642f5e9e36f03c8129
- MD5 0e4ee5bdab9d6ed09ab74271529f69ba
- SHA1 c16fed1d223d3319ed8380d50bd6487a90bb32aa
- SHA512 65c138475baf6e21fb3d5b7f288e682f7c56c29584cd6aea7be12719edc4a85604de85919f2106fa7bab211077e5d6cfc7c0aad37badde2985e3eaa3d2eda016
- SSDEEP 24576:peoj/BTdRjCHLLfAEVGREIouLWcf4EOAOv5tr0:DfRELrbGuALN4EOAZ
- TLSH T18C555B3165A55027E7F50533F910E730FE29F60C1B5889AAD6C0AC5C39789E96FFB20A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
tailscale-setup-1.102.2.exe
Resource
win11-20260513-en
30 signatures
150 seconds
Malware Config
Targets
-
- Target tailscale-setup-1.102.2.exe
- Size 1.3MB
- SHA256 247163eef27acfb5b14bf956b34ab462a73ea7c3ac51bb642f5e9e36f03c8129
- MD5 0e4ee5bdab9d6ed09ab74271529f69ba
- SHA1 c16fed1d223d3319ed8380d50bd6487a90bb32aa
- SHA512 65c138475baf6e21fb3d5b7f288e682f7c56c29584cd6aea7be12719edc4a85604de85919f2106fa7bab211077e5d6cfc7c0aad37badde2985e3eaa3d2eda016
- SSDEEP 24576:peoj/BTdRjCHLLfAEVGREIouLWcf4EOAOv5tr0:DfRELrbGuALN4EOAZ
- TLSH T18C555B3165A55027E7F50533F910E730FE29F60C1B5889AAD6C0AC5C39789E96FFB20A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1