Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
7Static
static
3geode-inst...in.exe
windows7-x64
7geode-inst...in.exe
windows10-2004-x64
7$PLUGINSDI...rd.bmp
windows7-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
7Geode.pdb
windows7-x64
3Geode.pdb
windows10-2004-x64
3geode/reso...hd.xml
windows7-x64
1geode/reso...hd.xml
windows10-2004-x64
1geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3geode/reso...hd.xml
windows7-x64
1geode/reso...hd.xml
windows10-2004-x64
1geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3geode/reso...et.xml
windows7-x64
1geode/reso...et.xml
windows10-2004-x64
1geode/reso...et.png
windows7-x64
3geode/reso...et.png
windows10-2004-x64
3geode/reso...hd.xml
windows7-x64
1geode/reso...hd.xml
windows10-2004-x64
1geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3geode/reso...hd.xml
windows7-x64
1geode/reso...hd.xml
windows10-2004-x64
1geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3geode/reso...et.xml
windows7-x64
1geode/reso...et.xml
windows10-2004-x64
1geode/reso...et.png
windows7-x64
3geode/reso...et.png
windows10-2004-x64
3geode/reso...hd.png
windows7-x64
3geode/reso...hd.png
windows10-2004-x64
3General
-
Target
geode-installer-v3.1.1-win.exe
-
Size
34.5MB
-
Sample
240703-1e88aayhrf
-
MD5
9ae3a123579ccdadce41b506ef72d482
-
SHA1
a3c4d035a75f2ee40fbed8798533b6d90a017a79
-
SHA256
f19a78af49f7491a569092e907e3df8175429641cb6f0031cd6703cde239ef96
-
SHA512
fdff60fba97ec939be456df40d97fd33cc066bc52c5fd203443c1fc4b9b2bf3fe94964a204d22c3b8460317dc6659099196cf84f09f00075969f3d447475d37c
-
SSDEEP
786432:x1njm568yoYHqfMWldv8B/M8jy+7TXd0klwVNV/WdpbcS:x9jmCoYHCtjwM8jf3X+7Irbh
Static task
static1
Behavioral task
behavioral1
Sample
geode-installer-v3.1.1-win.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
geode-installer-v3.1.1-win.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Geode.pdb
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Geode.pdb
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
geode/resources/geode.loader/APISheet-hd.xml
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
geode/resources/geode.loader/APISheet-hd.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
geode/resources/geode.loader/APISheet-hd.png
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
geode/resources/geode.loader/APISheet-hd.png
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
geode/resources/geode.loader/APISheet-uhd.xml
Resource
win7-20240419-en
Behavioral task
behavioral12
Sample
geode/resources/geode.loader/APISheet-uhd.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
geode/resources/geode.loader/APISheet-uhd.png
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
geode/resources/geode.loader/APISheet-uhd.png
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
geode/resources/geode.loader/APISheet.xml
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
geode/resources/geode.loader/APISheet.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
geode/resources/geode.loader/APISheet.png
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
geode/resources/geode.loader/APISheet.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
geode/resources/geode.loader/BlankSheet-hd.xml
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
geode/resources/geode.loader/BlankSheet-hd.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
geode/resources/geode.loader/BlankSheet-hd.png
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
geode/resources/geode.loader/BlankSheet-hd.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
geode/resources/geode.loader/BlankSheet-uhd.xml
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
geode/resources/geode.loader/BlankSheet-uhd.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
geode/resources/geode.loader/BlankSheet-uhd.png
Resource
win7-20240508-en
Behavioral task
behavioral26
Sample
geode/resources/geode.loader/BlankSheet-uhd.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
geode/resources/geode.loader/BlankSheet.xml
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
geode/resources/geode.loader/BlankSheet.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
geode/resources/geode.loader/BlankSheet.png
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
geode/resources/geode.loader/BlankSheet.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
geode/resources/geode.loader/GE_button_01-hd.png
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
geode/resources/geode.loader/GE_button_01-hd.png
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
geode-installer-v3.1.1-win.exe
-
Size
34.5MB
-
MD5
9ae3a123579ccdadce41b506ef72d482
-
SHA1
a3c4d035a75f2ee40fbed8798533b6d90a017a79
-
SHA256
f19a78af49f7491a569092e907e3df8175429641cb6f0031cd6703cde239ef96
-
SHA512
fdff60fba97ec939be456df40d97fd33cc066bc52c5fd203443c1fc4b9b2bf3fe94964a204d22c3b8460317dc6659099196cf84f09f00075969f3d447475d37c
-
SSDEEP
786432:x1njm568yoYHqfMWldv8B/M8jy+7TXd0klwVNV/WdpbcS:x9jmCoYHCtjwM8jf3X+7Irbh
Score7/10-
Loads dropped DLL
-
-
-
Target
$PLUGINSDIR/modern-wizard.bmp
-
Size
201KB
-
MD5
3c5626cfc549b9a2fc147f84601a68b1
-
SHA1
df2015ab7aa2eb9943cc5929fb9f7ec14a26b71e
-
SHA256
4873a57c9b2d697e4f8689ff7a2f785fb836a6289bc377320987b5541856234c
-
SHA512
b076a7c5350a8fda2f641c052bab4f87a602f313c91a3c0ceab2da45f9753cd89ee97497a5c67552e65a97de1366e69bfc531f6b728224e86314b90b91fd9511
-
SSDEEP
384:Gx1uncOx0y1ARSzKyHOTEdWTBSYY0Z9XENc5iXbu8naAQHmUn0R/V8jQ1P6g1PKF:0uxVMsf8EbFGHmLRt8jQ1iE95CP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
Geode.pdb
-
Size
44.9MB
-
MD5
73e8f1f93af215c0d5c66274f262abf5
-
SHA1
05b6190317b3d6a27dd13dd5cb8427ae044b1bd2
-
SHA256
a14dbdfaafc80a35847a755804228597c4c279cdc17e3e57c43d714ee7c8a700
-
SHA512
d910eade05a6f6e6c9f35df4ef2b03aca4a4fdee6f36d7e54c0b10537e41d64a2393916ed8bd603b760d890c61b7cebb7d4f84a62a8a0e1b7e60029966854ac0
-
SSDEEP
196608:WIZ4VSOeyOx6Taw6RH6gsK8t4Yvf9PquKLDZ2phdwiqHrk+ySs1FI4m/idbwDPyE:WA57xSvCmUc7O
Score3/10 -
-
-
Target
geode/resources/geode.loader/APISheet-hd.plist
-
Size
13KB
-
MD5
f6a2b7a486e1a6615599e900e213c7dd
-
SHA1
b8c99a705610957b0966bb960db5f33cbe32268c
-
SHA256
69e79326343a65e9aba9b9be40df6593eef9f8108b60fb3a6a81dc5edc13c27c
-
SHA512
7adc1b51ce923e752e8f99d10ea01fb7dd2a2008c0779243e7fb472554ef100d301f37c4fc6aad33de345bdd5ac592ca2ea83b56d007538a95a62286e3811e3c
-
SSDEEP
96:CyQcEcodcBcGcjec3z+cTcecKYcacD0cmcTzc2cycYcdzcvwcBHDQcSmcpicVDfU:XUzHGx1LHs
Score1/10 -
-
-
Target
geode/resources/geode.loader/APISheet-hd.png
-
Size
191KB
-
MD5
66ef89db78d01b73822cd4e438792119
-
SHA1
42df6bc5f20dda4f18c65ca586b274c9e81bbb70
-
SHA256
dfa35d7a1d28cc2e662aef14ee60fcb9121dd6c3ce34219a160ba87def913ef5
-
SHA512
6860ae752ebf1f7b16f174748c6f256d43e6eb5fc04f89fcfbd34d191c6704731faefc69da0f21cddbbaaaa8c9585777aa176e649461a082bea1ad02567212b5
-
SSDEEP
3072:HCkNnrG5AzCnXDoU8cb0Ufl9Lf5PVoPU93VAMR25bpeJOqaZiHOwOD+7F:HCkNrwAzQP3b0c9Lf5PnFAA25bxqaZKH
Score3/10 -
-
-
Target
geode/resources/geode.loader/APISheet-uhd.plist
-
Size
13KB
-
MD5
6e3858c21f20b70a3a6c3a1e39455e36
-
SHA1
4582418f64f7729853158818193449ab2a57b0f4
-
SHA256
bcc463f81fa72d079a6f28906522d92a624f965e99cc094fb74526e1d6a5736a
-
SHA512
e25170a33aa50e5404706f281749ce0b72088f454315a4dfcc3b93dd1aee7d8b61d296ac4649a234f29810b0060e7638fec3627d3c98fe9ddbd6e43f57111ae4
-
SSDEEP
96:CyQcJcwchccEEcjE8VcTAcucHckqCYc6ce0ngzc/qcicnyz6QcCcaTX0mcEic7tp:XEEjEBqwkTX0tqKhGf+zpbf8f
Score1/10 -
-
-
Target
geode/resources/geode.loader/APISheet-uhd.png
-
Size
336KB
-
MD5
4f9684eeb8799d7b512a9052676114e5
-
SHA1
8a927a70a72c76a651c25d4314abe0f00457fafa
-
SHA256
8a669d0c93b18e787df32aa17091a5db7fef992a3cebdf4e5a863a264b1d7699
-
SHA512
7a99cd629f7d24df9fb6e240dd603a42ca63c7247a7bc264d76160f286658646e41324a5e613723f40adb2f0ac9096e25ed6c643d079f565f3c470b584b7de78
-
SSDEEP
6144:FyJjQQ250wXa0+hCrCmacxAn4yf2PvRN5P6UUxv:kgSwfswTbAn4L305J
Score3/10 -
-
-
Target
geode/resources/geode.loader/APISheet.plist
-
Size
13KB
-
MD5
38c9c98219793327dc55f420a2f0a4fd
-
SHA1
2b5bdb3629538f1f854ca5f95b6a7b6eb95897e7
-
SHA256
e321114401a7137a3c1055c89b89890d8b7f11957e5e6d56f2bdd05158c286a9
-
SHA512
57e50bbcb5afc5a8b21592b9966249bc93955f15ac012fcccd5c13798e912ad6285b78ba73b4ca33641407bd03d8fcea981bd9b8109d50cc4c5c560d71728ef6
-
SSDEEP
96:CyQco4FGcNc2cFczXchcVPccFczYcT9co0cmc2zcA5cW5cDcazsjc/cDBdcAmcKj:X0g1VwuoxnR
Score1/10 -
-
-
Target
geode/resources/geode.loader/APISheet.png
-
Size
77KB
-
MD5
f4aa11f0548cd77f82414dc97f52a349
-
SHA1
8a64d0a57edda8777ebcdb4313d6769a05ead8f0
-
SHA256
319e7a1ebec294e79f1488184a4a442c1a7ea23f6ae7a05a7e08b5569c0cc0a9
-
SHA512
31a474b48be97fc3f876c269889775283f3db04cb8e07e53060a5fba5a66063083b98e5ea7b2c8ab94a62f54d46f488178ad46e659a2d88374cfd9fb56207b01
-
SSDEEP
1536:h1GBxLiZ6KFNk7BDZ3EMA7+4L1WEarwuOeUza56:h1GBxUbk7b3EN+4L1W8ubxU
Score3/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet-hd.plist
-
Size
26KB
-
MD5
98744000b370db49bce0cf184f4aa292
-
SHA1
ea1429abce9e4a307f298a7ea396493c1889d581
-
SHA256
3d2e1635a624d9dd31cb8e35d1ee4c8b377d5a199303667073faecdb349255a7
-
SHA512
8b2f09b848c82409d0f452f20e6f745028152163acd9a4d5d1a18ba0763183d95d1da29272b7bcdf36e2b5aee48ae1819ab3c3fc4015c5e553d8d24b433e5c42
-
SSDEEP
96:CybcMPcM1zcM3BVRh1bzFkZII8tbzlMGSm31bzSu9B6eaRbz0wznQuzGuzBuz2bo:XB9f7595tFM5dXQaWHzLlJt7vDJJjwo
Score1/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet-hd.png
-
Size
925KB
-
MD5
13ca715410976e76999c163bfb8b07ba
-
SHA1
70af8043cd26c095881e9ef28de091c47f329137
-
SHA256
3d7951779dd379b70cff59d77d837feb14963ec962118158f43c3a415a9fc12f
-
SHA512
6ebfc5e1afecb3e9956c82e9b09b1ebed722fa6196a49cfc5047df94106a0db0984fceac9d2fbbc522f8f765ec9444ca252fe1a7774b9e020b4bf5e392d9661a
-
SSDEEP
24576:YWCaHGq50eidLEFQNRIuqeybZx8WgkOjEX2YGRIV:YdiqW+RIuqLGzY2y
Score3/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet-uhd.plist
-
Size
26KB
-
MD5
0e1fd6ae865a404cd86d0960d81e83f5
-
SHA1
129fc6af07e1cf4165fe53eb1dc5cfc609a1c2ca
-
SHA256
0e63ee9b77d46eb632aa9c34922f16d9785c966b03ae4762442e28021ca749de
-
SHA512
7b786456ba502fd5daf9e9f843665001916e1d1f327e1924aeed1e1b15a7a0dd998b6098eaa8af09b1c6eed90e5b4b86237d390fb0b80201c960aeea6d5e308e
-
SSDEEP
384:P3bsQsK9Y1na9Gjr12brMmbwTiT/J6GvKrgRuQLna:PLJF41grzna
Score1/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet-uhd.png
-
Size
2.1MB
-
MD5
fd18cc851fb044d2c5c758bfc1ab11a5
-
SHA1
2eb14356f4807dd6e7b2c51e8a65861036d0e3a4
-
SHA256
24f6d5d41a5a6896852eda8885cc882c2cf0187c6d29d9f92f70f02b56f92488
-
SHA512
6d9c4c7870b98f5f6b995b32ab802f5168d8112b73f3415e2a47d4b6ebd9ad4ac4069d43a49c6c97bfa8e320183139ceace2a256ea435177e8b4ae5c88fc0db6
-
SSDEEP
49152:eYpb88NvA+wemeLmBBsk59YvonTG7GxV0:ti8C+6BsoYvBd
Score3/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet.plist
-
Size
26KB
-
MD5
d5d6cb42c03945ec88bfbd08713cee0b
-
SHA1
1cdd30a512fbf037079e79045a5e57ab36bf146a
-
SHA256
33706bcf8162c644b43abeaf0db03e50d5eedbc9cb165dbc4abc6437cf9380c2
-
SHA512
a3a3add7e39d33932695987461860dfbc5119e4451e2c169c7b29f301937c38179d8ca668a60bfd845ba61987680fb778ec737f8f4ee567ebb39b459f5d6daa0
-
SSDEEP
96:CybcicFzctGdd39bzo25XcQqccQq1bzcQqHcQqyKcQqClcQqp1V+bzq7Jjyx+bzH:X0OnCbQXgZJ/LHn
Score1/10 -
-
-
Target
geode/resources/geode.loader/BlankSheet.png
-
Size
320KB
-
MD5
99f12f413136e5a0f929a12885e411fb
-
SHA1
35d933408ed391dd3d3334b90d5d814f7f1fc243
-
SHA256
8069d127726b63a39a39ba7ccad9813f0387979a8fdf50fa8cc1eac9afecea51
-
SHA512
f3fdd466c7bd5a2eafe6c9d6faee82ed8a6ba6cd3ad88fb333f33f529aa0c393246de3e7fcf285d9099669d5f4c9f8d63249dfd1104fb2f0fe20ffd481814a60
-
SSDEEP
6144:aDDN07YMUduJ5zmHhMoNZiBEe5RmSGAji/3N35DRbMOQzwsaFzcKhAGy:yhwYMUduJ5zmHOu7AmSGdvDDLBsaFzcP
Score3/10 -
-
-
Target
geode/resources/geode.loader/GE_button_01-hd.png
-
Size
2KB
-
MD5
74637220bbd98b1f00403c85fb67a0bb
-
SHA1
ee0a0eff2a705600a8b1c6fa9be3f9fdcd86ed44
-
SHA256
aa4ff17ccf6d0b2f0138db3510dab5a47ec499d80502b7bb0a191ca00fb3150b
-
SHA512
657b091f8237dcf37558345c8d021add085790147f45cbe21601d2f8fe4d5d62866e4481432775e0e592df98892d49b3d85a8e8cb2ef94c4dbd1e856f29174e6
Score3/10 -