Overview
overview
7Static
static
3geode-inst...in.exe
windows7-x64
7geode-inst...in.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3Geode.dll
windows7-x64
1Geode.dll
windows10-2004-x64
1GeodeUninstaller.exe
windows7-x64
7GeodeUninstaller.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...rd.bmp
windows7-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
7$PLUGINSDI...gs.dll
windows7-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3GeodeUpdater.exe
windows7-x64
1GeodeUpdater.exe
windows10-2004-x64
1VC_redist.x86.exe
windows7-x64
4VC_redist.x86.exe
windows10-2004-x64
4XInput9_1_0.dll
windows7-x64
1XInput9_1_0.dll
windows10-2004-x64
1geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3geode/reso...no.fnt
windows7-x64
3geode/reso...no.fnt
windows10-2004-x64
3geode/reso...no.png
windows7-x64
3geode/reso...no.png
windows10-2004-x64
3General
-
Target
geode-installer-v2.0.0-beta.23-win.exe
-
Size
25.7MB
-
Sample
240406-q3x5tacc84
-
MD5
4d54a270825b2ff973bda4be5e47a8ae
-
SHA1
db6e7790c2a7f0ec48a86a3a3e63758c92c7b197
-
SHA256
55aa5ea3f3aea2186f963209015fe71f37244df3149661746f1aaf7545fe95fd
-
SHA512
e12a7907a355b2fcad259c3de2ea2197c5a48373c9f00458661923fb3427d51e546e2ce85c11c361f9b97fa272f0f12fb6ea73fc0f4db07925f7424c2f193131
-
SSDEEP
786432:usDruLYyGKwaj1Bq2vFRDDmAntXB7Ep+zJfKcf2zuP9W:uiuMyjwafTLDaAntXB7E4zH289W
Static task
static1
Behavioral task
behavioral1
Sample
geode-installer-v2.0.0-beta.23-win.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
geode-installer-v2.0.0-beta.23-win.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Geode.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Geode.dll
Resource
win10v2004-20240319-en
Behavioral task
behavioral11
Sample
GeodeUninstaller.exe
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
GeodeUninstaller.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
GeodeUpdater.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
GeodeUpdater.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
VC_redist.x86.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
VC_redist.x86.exe
Resource
win10v2004-20240319-en
Behavioral task
behavioral25
Sample
XInput9_1_0.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
XInput9_1_0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
geode/resources/geode.loader/mdFontMono-uhd.png
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
geode/resources/geode.loader/mdFontMono-uhd.png
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
geode/resources/geode.loader/mdFontMono.fnt
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
geode/resources/geode.loader/mdFontMono.fnt
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
geode/resources/geode.loader/mdFontMono.png
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
geode/resources/geode.loader/mdFontMono.png
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
geode-installer-v2.0.0-beta.23-win.exe
-
Size
25.7MB
-
MD5
4d54a270825b2ff973bda4be5e47a8ae
-
SHA1
db6e7790c2a7f0ec48a86a3a3e63758c92c7b197
-
SHA256
55aa5ea3f3aea2186f963209015fe71f37244df3149661746f1aaf7545fe95fd
-
SHA512
e12a7907a355b2fcad259c3de2ea2197c5a48373c9f00458661923fb3427d51e546e2ce85c11c361f9b97fa272f0f12fb6ea73fc0f4db07925f7424c2f193131
-
SSDEEP
786432:usDruLYyGKwaj1Bq2vFRDDmAntXB7Ep+zJfKcf2zuP9W:uiuMyjwafTLDaAntXB7E4zH289W
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
50016010fb0d8db2bc4cd258ceb43be5
-
SHA1
44ba95ee12e69da72478cf358c93533a9c7a01dc
-
SHA256
32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
-
SHA512
ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
-
SSDEEP
48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
4add245d4ba34b04f213409bfe504c07
-
SHA1
ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
-
SHA256
9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
-
SHA512
1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
-
SSDEEP
192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score3/10 -
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
1d8f01a83ddd259bc339902c1d33c8f1
-
SHA1
9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
-
SHA256
4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
-
SHA512
28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
-
SSDEEP
96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
Score3/10 -
-
-
Target
Geode.dll
-
Size
7.5MB
-
MD5
e5ce38e49a3e32be6e04afa0ee5aa9a6
-
SHA1
271f7f35264c68ccdb29a69e67f044fbeb0f1c2d
-
SHA256
880ad028b514d58003a916b7eca71c36a2cd8cd87c5e917319ddd74670c5d4d1
-
SHA512
a40a0c1a64591a3a4aa051fca722913ea922239b16f0745816e159adec4add1f6b58dd7188576d386b5a19aa99b751429b80cd6e8034959f9e312d63b0d54433
-
SSDEEP
49152:qJMDMcG9YiqnQRCkuR+KATaUGnjlmpdXdIO7RAJv5pAQ0HLPTNqdzO7+1MctuvZQ:b69enQRMwXfRAJvN0rpqdzO7+
Score1/10 -
-
-
Target
GeodeUninstaller.exe
-
Size
84KB
-
MD5
5b1cb33d4e7e5bb1ab03688ae64e79ea
-
SHA1
f405e17393431881ca8864a4316d9cc55c17c36b
-
SHA256
b7402aa7d2a9863e9c93d4fff4816b8a9e54f331d4a3124841618787a9fbea10
-
SHA512
31d22dd87f84315ace0bbd02a0ea685d548d6306c1bdabcb7588e3808fb045af99795647a5ea3a9b5a9fbed9d89601721dd09bafdc00e8651f982019b26f79a6
-
SSDEEP
1536:UferrLkSRoe8C4UZsys0Dh1duX6e4RwpBBiBX7IS0hyv4uL7010n6BBFV:Ufi3k+oWDBDh1dunhpDiuhGN70+n6XP
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/LangDLL.dll
-
Size
5KB
-
MD5
50016010fb0d8db2bc4cd258ceb43be5
-
SHA1
44ba95ee12e69da72478cf358c93533a9c7a01dc
-
SHA256
32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
-
SHA512
ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
-
SSDEEP
48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
4add245d4ba34b04f213409bfe504c07
-
SHA1
ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
-
SHA256
9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
-
SHA512
1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
-
SSDEEP
192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
Score3/10 -
-
-
Target
$PLUGINSDIR/modern-wizard.bmp
-
Size
201KB
-
MD5
3c5626cfc549b9a2fc147f84601a68b1
-
SHA1
df2015ab7aa2eb9943cc5929fb9f7ec14a26b71e
-
SHA256
4873a57c9b2d697e4f8689ff7a2f785fb836a6289bc377320987b5541856234c
-
SHA512
b076a7c5350a8fda2f641c052bab4f87a602f313c91a3c0ceab2da45f9753cd89ee97497a5c67552e65a97de1366e69bfc531f6b728224e86314b90b91fd9511
-
SSDEEP
384:Gx1uncOx0y1ARSzKyHOTEdWTBSYY0Z9XENc5iXbu8naAQHmUn0R/V8jQ1P6g1PKF:0uxVMsf8EbFGHmLRt8jQ1iE95CP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
$PLUGINSDIR/nsDialogs.dll
-
Size
9KB
-
MD5
1d8f01a83ddd259bc339902c1d33c8f1
-
SHA1
9f7806af462c94c39e2ec6cc9c7ad05c44eba04e
-
SHA256
4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed
-
SHA512
28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567
-
SSDEEP
96:o4Ev02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YsNqkzfFc:o4EvCu5e81785qHFcU0PuAw0uyGIFc
Score3/10 -
-
-
Target
GeodeUpdater.exe
-
Size
70KB
-
MD5
ebc79cac0d135c7ce980a734bab9a1e2
-
SHA1
779251e91e98d0c230f155f8f910bbe4651bc980
-
SHA256
44d88b9a534b8a439c31a9f2588cfd4e7081eaafc8d4cd0cda51acfba8bec2d1
-
SHA512
007e6d795bcbee12cf56ef5b73230f9c12004f36d838e313032d36bdcc3706a0f39286abb4d51be5baf509231291e771ee78fda26152904025c7d48ade963b1a
-
SSDEEP
1536:BQCghUldOxWRnHrXJS/WbVn1JSSZRNASzoVwpyT8Af:BQCghUldOxWRnHrXJSu5n1PZi0ygA
Score1/10 -
-
-
Target
VC_redist.x86.exe
-
Size
13.2MB
-
MD5
9882a328c8414274555845fa6b542d1e
-
SHA1
ab4a97610b127d68c45311deabfbcd8aa7066f4b
-
SHA256
510fc8c2112e2bc544fb29a72191eabcc68d3a5a7468d35d7694493bc8593a79
-
SHA512
c08d1aa7e6e6215a0cee2793592b65668066c8c984b26675d2b8c09bc7fee21411cb3c0a905eaee7a48e7a47535fa777de21eeb07c78bca7bf3d7bb17192acf2
-
SSDEEP
196608:oRjgvJ2flpQcIIS/Rj7BWl+aV8t8z72BxBwBgO42BE6+2DQlMp1sHW5ZDmCCM0Xr:IgRIlptVYmfr7yBG/4pXMHsHW76CsGE
Score4/10 -
-
-
Target
XInput9_1_0.dll
-
Size
11KB
-
MD5
830e56208ade5317e5533599f54d05da
-
SHA1
fd4d925983d8193f5509931f9c8bcbbe411bee80
-
SHA256
4fd284d19300d6250e736585418bfbcffc06f0bb7c2af73a24818a9131a558e2
-
SHA512
676b918b73693c2d6569c68ec85617f0a5195ea46eefb6d8a8b948dbc16daf8f03207ea68c0104fa685291bccd17c5d5379d1dcbff23fc1095f9d31a2d829e41
-
SSDEEP
192:cQdcdW6Ss9HI23vSdZXShyWJT/BEaE+EgwijOyXaCwmPgbDLTGc:y/SspI2WgHJZlj/Xa/tvi
Score1/10 -
-
-
Target
geode/resources/geode.loader/mdFontMono-uhd.png
-
Size
50KB
-
MD5
2700f410e5f441a5da1532bc64d56a38
-
SHA1
2e605ca2be13a20dbb09aee982e70076b2d7affd
-
SHA256
4736b83bedce083a6937cc94f8e0b5ed19e6d6f6db9180f4905060c288fa9c39
-
SHA512
7782c894f96521d21b62c52122cf8d546295d170afde55bf23672bf047df89b487f67a59ea2fdc0232c6c6f2ce668031f93086ebe7712b623224969afeb41ec0
-
SSDEEP
1536:xru/J7dD7B5+9Fc2ZHJ8lbRyK22M0EC6mbVwa4:AdD7B5kOY8pRyX0gmbKl
Score3/10 -
-
-
Target
geode/resources/geode.loader/mdFontMono.fnt
-
Size
8KB
-
MD5
66228295679a30f20adbfce95a2de1e2
-
SHA1
a4263b023aeefd63a6f4e9ae2a0dd503f4d666fa
-
SHA256
c35cd366f822ddccf4273277a0e0c17cd6b942ad157893642066be28b0606725
-
SHA512
30025f681bf0dfcdca6a5c719fbd6981d14a8d8b1a6548030919011619114726c039f114b91e7abc47d757f1f0f52446feb5fb485242d577166031843d21da65
-
SSDEEP
192:2m/yeg4Dn2JZRJ5zlNPPuTRMU9V1RqyLtyiX7ThvUsVqb5fuIXTI5QUOLHVzV/ay:M5ZN3x
Score3/10 -
-
-
Target
geode/resources/geode.loader/mdFontMono.png
-
Size
12KB
-
MD5
bb67c024661bf9ee68b715d2329b3103
-
SHA1
e88ef9bf09fd1fef95914356e26399694e72b3a8
-
SHA256
3473a0d1c7e2acd3aa367d9eeaf1963e6db0a0c563b24ceccd7726aef58449ab
-
SHA512
7d50582bdd7be1de2f16c743b7c4f19c33ca03abd27bac2410f37a5eab99797f0bfb1331557cc96ab1ce71907af7250946d788d2ff64819420f1424803658f76
-
SSDEEP
192:USw4CMUOZcBpP57wPnoNiSQDNNT7tcHFP/vb10s1ntWues7xdGFu6F60lXf50V1z:USSQcPB7sSQRNTZcHFD1/IL8CuCf50Vh
Score3/10 -