Overview
overview
7Static
static
3geode-inst...in.exe
windows11-21h2-x64
7geode-inst...in.exe
ubuntu-20.04-amd64
$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
ubuntu-20.04-amd64
$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
ubuntu-20.04-amd64
$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
ubuntu-20.04-amd64
Geode.dll
windows11-21h2-x64
1Geode.dll
ubuntu-20.04-amd64
GeodeUninstaller.exe
windows11-21h2-x64
7GeodeUninstaller.exe
ubuntu-20.04-amd64
$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...LL.dll
ubuntu-20.04-amd64
$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
ubuntu-20.04-amd64
$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
ubuntu-20.04-amd64
GeodeUpdater.exe
windows11-21h2-x64
1GeodeUpdater.exe
ubuntu-20.04-amd64
VC_redist.x86.exe
windows11-21h2-x64
4VC_redist.x86.exe
ubuntu-20.04-amd64
XInput9_1_0.dll
windows11-21h2-x64
1XInput9_1_0.dll
ubuntu-20.04-amd64
Analysis
-
max time kernel
1463s -
max time network
1480s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
22-03-2024 06:02
Static task
static1
Behavioral task
behavioral1
Sample
geode-installer-v2.0.0-beta.20-win.exe
Resource
win11-20240221-en
Behavioral task
behavioral2
Sample
geode-installer-v2.0.0-beta.20-win.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win11-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral9
Sample
Geode.dll
Resource
win11-20240221-en
Behavioral task
behavioral10
Sample
Geode.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral11
Sample
GeodeUninstaller.exe
Resource
win11-20240221-en
Behavioral task
behavioral12
Sample
GeodeUninstaller.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/LangDLL.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win11-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20240221-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral19
Sample
GeodeUpdater.exe
Resource
win11-20240221-en
Behavioral task
behavioral20
Sample
GeodeUpdater.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral21
Sample
VC_redist.x86.exe
Resource
win11-20240221-en
Behavioral task
behavioral22
Sample
VC_redist.x86.exe
Resource
ubuntu2004-amd64-20240221-en
Behavioral task
behavioral23
Sample
XInput9_1_0.dll
Resource
win11-20240221-en
Behavioral task
behavioral24
Sample
XInput9_1_0.dll
Resource
ubuntu2004-amd64-20240221-en
General
-
Target
XInput9_1_0.dll
-
Size
11KB
-
MD5
d61fd9bf10f59713082cfc9a3accbf87
-
SHA1
d36a0129c846be9bd2a79af82a5a9af199f84ed8
-
SHA256
0222e64dc51dc14095e453b46b485834b0c81ae8ced850e7e7b52acf11bb723e
-
SHA512
595e73710bb567fd8be0ac130aac6334ae34bddca3e39c34322c7390947152d15a8717d30a6e923c6d48390312f42501f29436d6c73be59ed086d26362921c3d
-
SSDEEP
192:TQdcdW6Ss9HI23vSdZXShyWJT/BEaE+EgwijOyKaCwmPgbDLTGc:f/SspI2WgHJZlj/Ka/tvi
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2512 wrote to memory of 3940 2512 rundll32.exe rundll32.exe PID 2512 wrote to memory of 3940 2512 rundll32.exe rundll32.exe PID 2512 wrote to memory of 3940 2512 rundll32.exe rundll32.exe