0de54ccd8146146f7b7b5e92885b919779e2e923b2a12319f258d2e32d7777cd | Triage

Submit
Reports

Overview

overview

7

Static

static

3

geode-inst...in.exe

windows7-x64

7

geode-inst...in.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...rd.bmp

windows7-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

7

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Geode.dll

windows7-x64

1

Geode.dll

windows10-2004-x64

1

Geode.pdb

windows7-x64

3

Geode.pdb

windows10-2004-x64

3

GeodeUninstaller.exe

windows7-x64

7

GeodeUninstaller.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

GeodeUpdater.exe

windows7-x64

1

GeodeUpdater.exe

windows10-2004-x64

1

VC_redist.x86.exe

windows7-x64

4

VC_redist.x86.exe

windows10-2004-x64

4

XInput9_1_0.dll

windows7-x64

1

XInput9_1_0.dll

windows10-2004-x64

1

geode/reso...hd.xml

windows7-x64

1

geode/reso...hd.xml

windows10-2004-x64

1

geode/reso...hd.png

windows7-x64

3

geode/reso...hd.png

windows10-2004-x64

3

Analysis

max time kernel
141s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14-02-2024 22:16

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v2.0.0-beta.19-win.exe

Resource

win7-20231215-en

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

geode-installer-v2.0.0-beta.19-win.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20231222-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

Geode.dll

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral12

Sample

Geode.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral13

Sample

Geode.pdb

Resource

win7-20231215-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

Geode.pdb

Resource

win10v2004-20231215-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

GeodeUninstaller.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

GeodeUninstaller.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/System.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win7-20231129-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20231222-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral23

Sample

GeodeUpdater.exe

Resource

win7-20231215-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

GeodeUpdater.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

VC_redist.x86.exe

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

VC_redist.x86.exe

Resource

win10v2004-20231215-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

XInput9_1_0.dll

Resource

win7-20231215-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

XInput9_1_0.dll

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

geode/resources/geode.loader/APISheet-hd.xml

Resource

win7-20231215-en

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral30

Sample

geode/resources/geode.loader/APISheet-hd.xml

Resource

win10v2004-20231215-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

geode/resources/geode.loader/APISheet-hd.png

Resource

win7-20231215-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral32

Sample

geode/resources/geode.loader/APISheet-hd.png

Resource

win10v2004-20231215-en

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

geode/resources/geode.loader/APISheet-hd.xml
Size

6KB
MD5

b3be4aa674c35b9c9c07d545364b036e
SHA1

2554db77e27504c363b8c16c75f4bb752bb35b92
SHA256

e96a2d5bc8f0fb5faf06a67f5a022e985852dcaea70d20cd73a3d27271648e52
SHA512

c4d011e96a913c71b8ab34b996e8ea589f7150d3b28b50e30aa4461df481912b3cc18d3e55352123f6f47f3d1fe32136c82fe9855f1676bb6b2eda59029d555b
SSDEEP

96:CyQcEcodcstuO30cRcCcEc+zcHucAWgWS9cpcrc+cfE:XRRSt

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\geode\resources\geode.loader\APISheet-hd.xml"
1⤵
PID:4928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4928-0-0x00007FFDCD910000-0x00007FFDCD920000-memory.dmp

Filesize
64KB

Download
memory/4928-1-0x00007FFE0D890000-0x00007FFE0DA85000-memory.dmp

Filesize
2.0MB

Download
memory/4928-2-0x00007FFE0B180000-0x00007FFE0B449000-memory.dmp

Filesize
2.8MB

Download
memory/4928-3-0x00007FFDCD910000-0x00007FFDCD920000-memory.dmp

Filesize
64KB

Download
memory/4928-4-0x00007FFE0D890000-0x00007FFE0DA85000-memory.dmp

Filesize
2.0MB

Download

© 2018-2024

Terms | Privacy