Overview

overview

7

Static

static

3

geode-inst...in.exe

windows7-x64

7

geode-inst...in.exe

windows10-2004-x64

7

$PLUGINSDI...LL.dll

windows7-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

Geode.dll

windows7-x64

1

Geode.dll

windows10-2004-x64

1

GeodeUpdater.exe

windows7-x64

1

GeodeUpdater.exe

windows10-2004-x64

1

VC_redist.x86.exe

windows7-x64

4

VC_redist.x86.exe

windows10-2004-x64

4

XInput9_1_0.dll

windows7-x64

1

XInput9_1_0.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-05-2024 18:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    geode-installer-v2.0.0-beta.26-win.exe

  • Size

    25.9MB

  • MD5

    39d10002616e6d2142c8c1aeeec6327d

  • SHA1

    c8b934c3ef5a82672dbaba0ff6671b29c53911cf

  • SHA256

    2d5db17bbbb72469b53f2c1801e27e79a2dc83f266ca34710e4689d0c7b03cf6

  • SHA512

    9988a04be109630114085463a6d90a426c9c8384edbbd8718cc5789bd29a955f8c6a90ab1f3b89a4d6ba3dd18128eae1bd65d261ca54f6c639cb94368235d72b

  • SSDEEP

    786432:H4ybYCHgLccSo3DzHntXB7Ep+zJfKcf2zuP90:H40pA4cSkXHntXB7E4zH2890

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\geode-installer-v2.0.0-beta.26-win.exe
    "C:\Users\Admin\AppData\Local\Temp\geode-installer-v2.0.0-beta.26-win.exe"
    1⤵
    • Loads dropped DLL
    PID:3352

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsu38F3.tmp\LangDLL.dll
    Filesize

    5KB

    MD5

    549ee11198143574f4d9953198a09fe8

    SHA1

    2e89ba5f30e1c1c4ce517f28ec1505294bb6c4c1

    SHA256

    131aa0df90c08dce2eecee46cce8759e9afff04bf15b7b0002c2a53ae5e92c36

    SHA512

    0fb4cea4fd320381fe50c52d1c198261f0347d6dcee857917169fcc3e2083ed4933beff708e81d816787195cca050f3f5f9c5ac9cc7f781831b028ef5714bec8

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\nsu38F3.tmp\nsDialogs.dll
    Filesize

    9KB

    MD5

    b7d61f3f56abf7b7ff0d4e7da3ad783d

    SHA1

    15ab5219c0e77fd9652bc62ff390b8e6846c8e3e

    SHA256

    89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912

    SHA512

    6467c0de680fadb8078bdaa0d560d2b228f5a22d4d8358a1c7d564c6ebceface5d377b870eaf8985fbee727001da569867554154d568e3b37f674096bbafafb8

    Download Submit