Overview

overview

7

Static

static

3

geode-inst...in.exe

windows7-x64

7

geode-inst...in.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Geode.dll

windows7-x64

1

Geode.dll

windows10-2004-x64

1

GeodeUninstaller.exe

windows7-x64

7

GeodeUninstaller.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

GeodeUpdater.exe

windows7-x64

1

GeodeUpdater.exe

windows10-2004-x64

1

VC_redist.x86.exe

windows7-x64

4

VC_redist.x86.exe

windows10-2004-x64

4

XInput9_1_0.dll

windows7-x64

1

XInput9_1_0.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    geode-installer-v2.0.0-beta.21-win.exe

  • Size

    25.2MB

  • Sample

    240228-3nkbmagd6x

  • MD5

    cae19fe8742ce0e88b0a467796fb17b4

  • SHA1

    ca26c83e44bee51a65869de8fe8eacd519ca1bbb

  • SHA256

    a83ddd018568b1999f500cda66cfc0547eb97bdfbc27f7c6304bb827abb8c834

  • SHA512

    ca488936574116840991eb319a7010600dd12f64836f05bb3be60263875fe54c733dea832564177c3062820717ddd942e179ec022441eb20f1b0e798de1489c0

  • SSDEEP

    786432:u7J28uxPodX+61RWnDxqntXB7Ep+zJfKcf2zuP9i:u7J5TdFOtqntXB7E4zH289i

Score
7/10
discovery

Malware Config

Targets

    • Target

      geode-installer-v2.0.0-beta.21-win.exe

    • Size

      25.2MB

    • MD5

      cae19fe8742ce0e88b0a467796fb17b4

    • SHA1

      ca26c83e44bee51a65869de8fe8eacd519ca1bbb

    • SHA256

      a83ddd018568b1999f500cda66cfc0547eb97bdfbc27f7c6304bb827abb8c834

    • SHA512

      ca488936574116840991eb319a7010600dd12f64836f05bb3be60263875fe54c733dea832564177c3062820717ddd942e179ec022441eb20f1b0e798de1489c0

    • SSDEEP

      786432:u7J28uxPodX+61RWnDxqntXB7Ep+zJfKcf2zuP9i:u7J5TdFOtqntXB7E4zH289i

    Score
    7/10

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      50016010fb0d8db2bc4cd258ceb43be5

    • SHA1

      44ba95ee12e69da72478cf358c93533a9c7a01dc

    • SHA256

      32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e

    • SHA512

      ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233

    • SSDEEP

      48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL

    Score
    3/10
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      4add245d4ba34b04f213409bfe504c07

    • SHA1

      ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

    • SHA256

      9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

    • SHA512

      1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

    • SSDEEP

      192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr

    Score
    3/10
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      1d8f01a83ddd259bc339902c1d33c8f1

    • SHA1

      9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

    • SHA256

      4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

    • SHA512

      28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

    • SSDEEP

      96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc

    Score
    3/10
    behavioral7behavioral8

    • Target

      Geode.dll

    • Size

      6.7MB

    • MD5

      d48473acb4e0d5098b0645f19ad6489f

    • SHA1

      5989f8537b7ffd744df41c4ca762ed80a5319c8b

    • SHA256

      d117e2ca3d534eea2d0dc37deee1b5ab90c9e025f4bc46f689914b52a40addd2

    • SHA512

      997734a5d319520c7f72a5190a52dce55d540988d6545cd7648ca3a561b73cd5692b7550755f02cc0ab011a0f7fe44720a52c35541fe143964c4135f2d576054

    • SSDEEP

      49152:QtZ1dNGaQOXevM1N7mKuS26RgDGc4ZfF8HjQWEW+HLE4Q03ka1MeQj:gqNOuvM1hwp+HI03ka

    Score
    1/10
    behavioral10behavioral9

    • Target

      GeodeUninstaller.exe

    • Size

      84KB

    • MD5

      9c758642feced801392ff9cad7823687

    • SHA1

      2aab83a80a489cf332526912a0adbc13d02c5965

    • SHA256

      161638aa88a61d9a656c216c7a0de01e72632bc9c3f8e9127b1dc0659aa6ebd2

    • SHA512

      db07a6aba01151b8a079657795572fdfc428a9425a62d38a78aa3c48a88ef3a6eb175e8bc5a5a02d33bab736d41f765b09a62be5365335eb54753face49b59e7

    • SSDEEP

      1536:UferrLkSRoe8C4UZsys0Dh1duX6eAVDe6IzX7IS0hyv4uL7010n6BBFJ:Ufi3k+oWDBDh1dunvVchGN70+n6X3

    Score
    7/10

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral11behavioral12

    • Target

      $PLUGINSDIR/LangDLL.dll

    • Size

      5KB

    • MD5

      50016010fb0d8db2bc4cd258ceb43be5

    • SHA1

      44ba95ee12e69da72478cf358c93533a9c7a01dc

    • SHA256

      32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e

    • SHA512

      ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233

    • SSDEEP

      48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL

    Score
    3/10
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/System.dll

    • Size

      12KB

    • MD5

      4add245d4ba34b04f213409bfe504c07

    • SHA1

      ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

    • SHA256

      9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

    • SHA512

      1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

    • SSDEEP

      192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr

    Score
    3/10
    behavioral15behavioral16

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      9KB

    • MD5

      1d8f01a83ddd259bc339902c1d33c8f1

    • SHA1

      9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

    • SHA256

      4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

    • SHA512

      28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

    • SSDEEP

      96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc

    Score
    3/10
    behavioral17behavioral18

    • Target

      GeodeUpdater.exe

    • Size

      70KB

    • MD5

      0297b7050882af4aa434db6814c949da

    • SHA1

      adc3d8625e2802357dc712dcb55c7855b5e39801

    • SHA256

      54f506520bb1985930662918534c12e6e4c39b818c1e26b11c544dd35bef1660

    • SHA512

      285394e69b28b48f154db1f142eb8ac7d4beb5465f7e6c6b5f0666d07a2ed014fc7dbf5d5dad0fb61ec72d88abb565da5037d01d1e162284d63b178250e91368

    • SSDEEP

      1536:PjCyuCGrzy7fIa4d85Ss4euaeAvoz+xu1x2yyb2h:PjCyuCGrzy7fIa4av47jJjZyE

    Score
    1/10
    behavioral19behavioral20

    • Target

      VC_redist.x86.exe

    • Size

      13.2MB

    • MD5

      9882a328c8414274555845fa6b542d1e

    • SHA1

      ab4a97610b127d68c45311deabfbcd8aa7066f4b

    • SHA256

      510fc8c2112e2bc544fb29a72191eabcc68d3a5a7468d35d7694493bc8593a79

    • SHA512

      c08d1aa7e6e6215a0cee2793592b65668066c8c984b26675d2b8c09bc7fee21411cb3c0a905eaee7a48e7a47535fa777de21eeb07c78bca7bf3d7bb17192acf2

    • SSDEEP

      196608:oRjgvJ2flpQcIIS/Rj7BWl+aV8t8z72BxBwBgO42BE6+2DQlMp1sHW5ZDmCCM0Xr:IgRIlptVYmfr7yBG/4pXMHsHW76CsGE

    Score
    4/10
    discovery
    behavioral21behavioral22

    • Target

      XInput9_1_0.dll

    • Size

      11KB

    • MD5

      8347778c652c1362f141d189582e4702

    • SHA1

      1fd41308519e335c528c5d733139f1442a847b54

    • SHA256

      0385e5aa3bddd7bef29c6495e0e07e59dd014f0b111010fd8683484d51d519e7

    • SHA512

      5b43559f2c3b257ee3f9e86f9d68c3fe605e45eae0dc1da956d3666a25642d1ea680c10e781748e0f2ede5436d57d62d33e725a7fea6ec8a8b19f26c3b9d49d1

    • SSDEEP

      192:9QdcdW6Ss9HI23vSdZXShyWJT/BEaE+EgwijOyEaCwmPgbDLTGc:9/SspI2WgHJZlj/Ea/tvi

    Score
    1/10
    behavioral23behavioral24

MITRE ATT&CK Enterprise v15

Tasks