Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    geode-installer-v3.1.1-win.exe

  • Size

    34.5MB

  • Sample

    240703-1e88aayhrf

  • MD5

    9ae3a123579ccdadce41b506ef72d482

  • SHA1

    a3c4d035a75f2ee40fbed8798533b6d90a017a79

  • SHA256

    f19a78af49f7491a569092e907e3df8175429641cb6f0031cd6703cde239ef96

  • SHA512

    fdff60fba97ec939be456df40d97fd33cc066bc52c5fd203443c1fc4b9b2bf3fe94964a204d22c3b8460317dc6659099196cf84f09f00075969f3d447475d37c

  • SSDEEP

    786432:x1njm568yoYHqfMWldv8B/M8jy+7TXd0klwVNV/WdpbcS:x9jmCoYHCtjwM8jf3X+7Irbh

Score
7/10

Malware Config

Targets

    • Target

      geode-installer-v3.1.1-win.exe

    • Size

      34.5MB

    • MD5

      9ae3a123579ccdadce41b506ef72d482

    • SHA1

      a3c4d035a75f2ee40fbed8798533b6d90a017a79

    • SHA256

      f19a78af49f7491a569092e907e3df8175429641cb6f0031cd6703cde239ef96

    • SHA512

      fdff60fba97ec939be456df40d97fd33cc066bc52c5fd203443c1fc4b9b2bf3fe94964a204d22c3b8460317dc6659099196cf84f09f00075969f3d447475d37c

    • SSDEEP

      786432:x1njm568yoYHqfMWldv8B/M8jy+7TXd0klwVNV/WdpbcS:x9jmCoYHCtjwM8jf3X+7Irbh

    Score
    7/10
    • Loads dropped DLL

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      201KB

    • MD5

      3c5626cfc549b9a2fc147f84601a68b1

    • SHA1

      df2015ab7aa2eb9943cc5929fb9f7ec14a26b71e

    • SHA256

      4873a57c9b2d697e4f8689ff7a2f785fb836a6289bc377320987b5541856234c

    • SHA512

      b076a7c5350a8fda2f641c052bab4f87a602f313c91a3c0ceab2da45f9753cd89ee97497a5c67552e65a97de1366e69bfc531f6b728224e86314b90b91fd9511

    • SSDEEP

      384:Gx1uncOx0y1ARSzKyHOTEdWTBSYY0Z9XENc5iXbu8naAQHmUn0R/V8jQ1P6g1PKF:0uxVMsf8EbFGHmLRt8jQ1iE95CP

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Geode.pdb

    • Size

      44.9MB

    • MD5

      73e8f1f93af215c0d5c66274f262abf5

    • SHA1

      05b6190317b3d6a27dd13dd5cb8427ae044b1bd2

    • SHA256

      a14dbdfaafc80a35847a755804228597c4c279cdc17e3e57c43d714ee7c8a700

    • SHA512

      d910eade05a6f6e6c9f35df4ef2b03aca4a4fdee6f36d7e54c0b10537e41d64a2393916ed8bd603b760d890c61b7cebb7d4f84a62a8a0e1b7e60029966854ac0

    • SSDEEP

      196608:WIZ4VSOeyOx6Taw6RH6gsK8t4Yvf9PquKLDZ2phdwiqHrk+ySs1FI4m/idbwDPyE:WA57xSvCmUc7O

    Score
    3/10
    • Target

      geode/resources/geode.loader/APISheet-hd.plist

    • Size

      13KB

    • MD5

      f6a2b7a486e1a6615599e900e213c7dd

    • SHA1

      b8c99a705610957b0966bb960db5f33cbe32268c

    • SHA256

      69e79326343a65e9aba9b9be40df6593eef9f8108b60fb3a6a81dc5edc13c27c

    • SHA512

      7adc1b51ce923e752e8f99d10ea01fb7dd2a2008c0779243e7fb472554ef100d301f37c4fc6aad33de345bdd5ac592ca2ea83b56d007538a95a62286e3811e3c

    • SSDEEP

      96:CyQcEcodcBcGcjec3z+cTcecKYcacD0cmcTzc2cycYcdzcvwcBHDQcSmcpicVDfU:XUzHGx1LHs

    Score
    1/10
    • Target

      geode/resources/geode.loader/APISheet-hd.png

    • Size

      191KB

    • MD5

      66ef89db78d01b73822cd4e438792119

    • SHA1

      42df6bc5f20dda4f18c65ca586b274c9e81bbb70

    • SHA256

      dfa35d7a1d28cc2e662aef14ee60fcb9121dd6c3ce34219a160ba87def913ef5

    • SHA512

      6860ae752ebf1f7b16f174748c6f256d43e6eb5fc04f89fcfbd34d191c6704731faefc69da0f21cddbbaaaa8c9585777aa176e649461a082bea1ad02567212b5

    • SSDEEP

      3072:HCkNnrG5AzCnXDoU8cb0Ufl9Lf5PVoPU93VAMR25bpeJOqaZiHOwOD+7F:HCkNrwAzQP3b0c9Lf5PnFAA25bxqaZKH

    Score
    3/10
    • Target

      geode/resources/geode.loader/APISheet-uhd.plist

    • Size

      13KB

    • MD5

      6e3858c21f20b70a3a6c3a1e39455e36

    • SHA1

      4582418f64f7729853158818193449ab2a57b0f4

    • SHA256

      bcc463f81fa72d079a6f28906522d92a624f965e99cc094fb74526e1d6a5736a

    • SHA512

      e25170a33aa50e5404706f281749ce0b72088f454315a4dfcc3b93dd1aee7d8b61d296ac4649a234f29810b0060e7638fec3627d3c98fe9ddbd6e43f57111ae4

    • SSDEEP

      96:CyQcJcwchccEEcjE8VcTAcucHckqCYc6ce0ngzc/qcicnyz6QcCcaTX0mcEic7tp:XEEjEBqwkTX0tqKhGf+zpbf8f

    Score
    1/10
    • Target

      geode/resources/geode.loader/APISheet-uhd.png

    • Size

      336KB

    • MD5

      4f9684eeb8799d7b512a9052676114e5

    • SHA1

      8a927a70a72c76a651c25d4314abe0f00457fafa

    • SHA256

      8a669d0c93b18e787df32aa17091a5db7fef992a3cebdf4e5a863a264b1d7699

    • SHA512

      7a99cd629f7d24df9fb6e240dd603a42ca63c7247a7bc264d76160f286658646e41324a5e613723f40adb2f0ac9096e25ed6c643d079f565f3c470b584b7de78

    • SSDEEP

      6144:FyJjQQ250wXa0+hCrCmacxAn4yf2PvRN5P6UUxv:kgSwfswTbAn4L305J

    Score
    3/10
    • Target

      geode/resources/geode.loader/APISheet.plist

    • Size

      13KB

    • MD5

      38c9c98219793327dc55f420a2f0a4fd

    • SHA1

      2b5bdb3629538f1f854ca5f95b6a7b6eb95897e7

    • SHA256

      e321114401a7137a3c1055c89b89890d8b7f11957e5e6d56f2bdd05158c286a9

    • SHA512

      57e50bbcb5afc5a8b21592b9966249bc93955f15ac012fcccd5c13798e912ad6285b78ba73b4ca33641407bd03d8fcea981bd9b8109d50cc4c5c560d71728ef6

    • SSDEEP

      96:CyQco4FGcNc2cFczXchcVPccFczYcT9co0cmc2zcA5cW5cDcazsjc/cDBdcAmcKj:X0g1VwuoxnR

    Score
    1/10
    • Target

      geode/resources/geode.loader/APISheet.png

    • Size

      77KB

    • MD5

      f4aa11f0548cd77f82414dc97f52a349

    • SHA1

      8a64d0a57edda8777ebcdb4313d6769a05ead8f0

    • SHA256

      319e7a1ebec294e79f1488184a4a442c1a7ea23f6ae7a05a7e08b5569c0cc0a9

    • SHA512

      31a474b48be97fc3f876c269889775283f3db04cb8e07e53060a5fba5a66063083b98e5ea7b2c8ab94a62f54d46f488178ad46e659a2d88374cfd9fb56207b01

    • SSDEEP

      1536:h1GBxLiZ6KFNk7BDZ3EMA7+4L1WEarwuOeUza56:h1GBxUbk7b3EN+4L1W8ubxU

    Score
    3/10
    • Target

      geode/resources/geode.loader/BlankSheet-hd.plist

    • Size

      26KB

    • MD5

      98744000b370db49bce0cf184f4aa292

    • SHA1

      ea1429abce9e4a307f298a7ea396493c1889d581

    • SHA256

      3d2e1635a624d9dd31cb8e35d1ee4c8b377d5a199303667073faecdb349255a7

    • SHA512

      8b2f09b848c82409d0f452f20e6f745028152163acd9a4d5d1a18ba0763183d95d1da29272b7bcdf36e2b5aee48ae1819ab3c3fc4015c5e553d8d24b433e5c42

    • SSDEEP

      96:CybcMPcM1zcM3BVRh1bzFkZII8tbzlMGSm31bzSu9B6eaRbz0wznQuzGuzBuz2bo:XB9f7595tFM5dXQaWHzLlJt7vDJJjwo

    Score
    1/10
    • Target

      geode/resources/geode.loader/BlankSheet-hd.png

    • Size

      925KB

    • MD5

      13ca715410976e76999c163bfb8b07ba

    • SHA1

      70af8043cd26c095881e9ef28de091c47f329137

    • SHA256

      3d7951779dd379b70cff59d77d837feb14963ec962118158f43c3a415a9fc12f

    • SHA512

      6ebfc5e1afecb3e9956c82e9b09b1ebed722fa6196a49cfc5047df94106a0db0984fceac9d2fbbc522f8f765ec9444ca252fe1a7774b9e020b4bf5e392d9661a

    • SSDEEP

      24576:YWCaHGq50eidLEFQNRIuqeybZx8WgkOjEX2YGRIV:YdiqW+RIuqLGzY2y

    Score
    3/10
    • Target

      geode/resources/geode.loader/BlankSheet-uhd.plist

    • Size

      26KB

    • MD5

      0e1fd6ae865a404cd86d0960d81e83f5

    • SHA1

      129fc6af07e1cf4165fe53eb1dc5cfc609a1c2ca

    • SHA256

      0e63ee9b77d46eb632aa9c34922f16d9785c966b03ae4762442e28021ca749de

    • SHA512

      7b786456ba502fd5daf9e9f843665001916e1d1f327e1924aeed1e1b15a7a0dd998b6098eaa8af09b1c6eed90e5b4b86237d390fb0b80201c960aeea6d5e308e

    • SSDEEP

      384:P3bsQsK9Y1na9Gjr12brMmbwTiT/J6GvKrgRuQLna:PLJF41grzna

    Score
    1/10
    • Target

      geode/resources/geode.loader/BlankSheet-uhd.png

    • Size

      2.1MB

    • MD5

      fd18cc851fb044d2c5c758bfc1ab11a5

    • SHA1

      2eb14356f4807dd6e7b2c51e8a65861036d0e3a4

    • SHA256

      24f6d5d41a5a6896852eda8885cc882c2cf0187c6d29d9f92f70f02b56f92488

    • SHA512

      6d9c4c7870b98f5f6b995b32ab802f5168d8112b73f3415e2a47d4b6ebd9ad4ac4069d43a49c6c97bfa8e320183139ceace2a256ea435177e8b4ae5c88fc0db6

    • SSDEEP

      49152:eYpb88NvA+wemeLmBBsk59YvonTG7GxV0:ti8C+6BsoYvBd

    Score
    3/10
    • Target

      geode/resources/geode.loader/BlankSheet.plist

    • Size

      26KB

    • MD5

      d5d6cb42c03945ec88bfbd08713cee0b

    • SHA1

      1cdd30a512fbf037079e79045a5e57ab36bf146a

    • SHA256

      33706bcf8162c644b43abeaf0db03e50d5eedbc9cb165dbc4abc6437cf9380c2

    • SHA512

      a3a3add7e39d33932695987461860dfbc5119e4451e2c169c7b29f301937c38179d8ca668a60bfd845ba61987680fb778ec737f8f4ee567ebb39b459f5d6daa0

    • SSDEEP

      96:CybcicFzctGdd39bzo25XcQqccQq1bzcQqHcQqyKcQqClcQqp1V+bzq7Jjyx+bzH:X0OnCbQXgZJ/LHn

    Score
    1/10
    • Target

      geode/resources/geode.loader/BlankSheet.png

    • Size

      320KB

    • MD5

      99f12f413136e5a0f929a12885e411fb

    • SHA1

      35d933408ed391dd3d3334b90d5d814f7f1fc243

    • SHA256

      8069d127726b63a39a39ba7ccad9813f0387979a8fdf50fa8cc1eac9afecea51

    • SHA512

      f3fdd466c7bd5a2eafe6c9d6faee82ed8a6ba6cd3ad88fb333f33f529aa0c393246de3e7fcf285d9099669d5f4c9f8d63249dfd1104fb2f0fe20ffd481814a60

    • SSDEEP

      6144:aDDN07YMUduJ5zmHhMoNZiBEe5RmSGAji/3N35DRbMOQzwsaFzcKhAGy:yhwYMUduJ5zmHOu7AmSGdvDDLBsaFzcP

    Score
    3/10
    • Target

      geode/resources/geode.loader/GE_button_01-hd.png

    • Size

      2KB

    • MD5

      74637220bbd98b1f00403c85fb67a0bb

    • SHA1

      ee0a0eff2a705600a8b1c6fa9be3f9fdcd86ed44

    • SHA256

      aa4ff17ccf6d0b2f0138db3510dab5a47ec499d80502b7bb0a191ca00fb3150b

    • SHA512

      657b091f8237dcf37558345c8d021add085790147f45cbe21601d2f8fe4d5d62866e4481432775e0e592df98892d49b3d85a8e8cb2ef94c4dbd1e856f29174e6

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks