Overview
overview
8Static
static
3geany-2.1_setup.exe
windows10-2004-x64
4geany-2.1_setup.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...nu.dll
windows10-2004-x64
1$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...em.dll
windows10-2004-x64
1$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...fo.dll
windows10-2004-x64
1$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
1$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
1bin/geany.exe
windows10-2004-x64
7bin/geany.exe
windows11-ltsc_2024-x64
3bin/glib-c...as.exe
windows10-2004-x64
1bin/glib-c...as.exe
windows11-ltsc_2024-x64
1bin/grep.exe
windows10-2004-x64
1bin/grep.exe
windows11-ltsc_2024-x64
1bin/gspawn...le.exe
windows10-2004-x64
1bin/gspawn...le.exe
windows11-ltsc_2024-x64
1bin/gspawn...er.exe
windows10-2004-x64
1bin/gspawn...er.exe
windows11-ltsc_2024-x64
1bin/libLerc.dll
windows10-2004-x64
1bin/libLerc.dll
windows11-ltsc_2024-x64
1bin/libasprintf-0.dll
windows10-2004-x64
1bin/libasprintf-0.dll
windows11-ltsc_2024-x64
1bin/libatk-1.0-0.dll
windows10-2004-x64
1bin/libatk-1.0-0.dll
windows11-ltsc_2024-x64
8bin/libatomic-1.dll
windows10-2004-x64
1bin/libatomic-1.dll
windows11-ltsc_2024-x64
1bin/libbro...on.dll
windows10-2004-x64
1bin/libbro...on.dll
windows11-ltsc_2024-x64
8bin/libbrotlidec.dll
windows10-2004-x64
1bin/libbrotlidec.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/06/2026, 04:14
Static task
static1
Behavioral task
behavioral1
Sample
geany-2.1_setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
geany-2.1_setup.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral11
Sample
bin/geany.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
bin/geany.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral13
Sample
bin/glib-compile-schemas.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
bin/glib-compile-schemas.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
bin/grep.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
bin/grep.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral17
Sample
bin/gspawn-win64-helper-console.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
bin/gspawn-win64-helper-console.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral19
Sample
bin/gspawn-win64-helper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
bin/gspawn-win64-helper.exe
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral21
Sample
bin/libLerc.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
bin/libLerc.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral23
Sample
bin/libasprintf-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
bin/libasprintf-0.dll
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral25
Sample
bin/libatk-1.0-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
bin/libatk-1.0-0.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral27
Sample
bin/libatomic-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
bin/libatomic-1.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral29
Sample
bin/libbrotlicommon.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
bin/libbrotlicommon.dll
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral31
Sample
bin/libbrotlidec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
bin/libbrotlidec.dll
Resource
win11ltsc2024-20260618-en
General
- Target geany-2.1_setup.exe
- Size 26.9MB
- Sample260621-etvsjsct8v
- SHA256 50c7835b31bc736d0b5e5f894aa8ec08a95185873fb64d29a95727d2859107d8
- MD5 23250e9595bd432e8fdf111179062ce7
- SHA1 01bdcba989f9d19eb5aaf51d99fed6f0d2703d7a
- SHA512 c33732ad5146e3dc320d9e8a3157ac360a2e3d3053f9d155d3afe5ef75d82b17a7ad3e22caf2ab4d6fb32356c4a4b77c1d8f61e0a3103b001f0a4ce121cd7438
- SSDEEP 786432:2NjTvrV+/xKjfm/4FA1XRyqj5uSbw5MY4o/N/U5:25uxKL+dRyqj5uSbOM4hY
- TLSH T14A57330972B4D8DADC944FF4C9F267F7506E3DA61E2D00A725C9BCDE6825492DE832C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in Program Files directory 1 IoCs
description ioc Process File opened for modification C:\Program Files\Geany\nsxD5EC.tmp geany-2.1_setup.exe - Loads dropped DLL 5 IoCs
pid Process 6196 geany-2.1_setup.exe 6196 geany-2.1_setup.exe 6196 geany-2.1_setup.exe 6196 geany-2.1_setup.exe 6196 geany-2.1_setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nst4E6B.tmp\StartMenu.dll
- Size 11KB
- SHA256 effe60b43463322863e8418f82c53289361ef01bf60356500a2b48744fd6cff7
- MD5 3e28273accd1599f3b802132fa886d70
- SHA1 08e4df00b9fa354e2a06c2502310eba2d28b7aa0
- SHA512 d94c7e41706b774b7eb43ac4fdf5b25ce9591be6ba3db6ad9a1eb6a7383e3877180edea113074106271b311783e042cfbb21f1aefb48a4b43a2b6318284f12d6
- SSDEEP 192:HvJ9J/0aKTshtOJ1KNzv2UiiBo5BoYbK:HjSaKTsh8PK5vFD
- TLSH T1CF32D73E7ED141E9DC7AE334E0FE9A3465B2B414193A670F161881CBBE71BA19C78B44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nst4E6B.tmp\System.dll
- Size 25KB
- SHA256 b3bced739f46db4bdad114313bb3a6b35b4d6968f0b7721e987d30dbd0cda354
- MD5 da70fcd8f401abd9c8fa6a2dcc2c07d5
- SHA1 480921eadce0fb40473029d09b29cbf2264bddfc
- SHA512 498fd32e1a40987e4a52fecd7a59b22384740e2b3f56d0b4a5c8f012e085683584fa542ba4b827523d02ac7644fcdc2f6b52afb8bb41107827527d9e444dcbeb
- SSDEEP 384:5lTiMPpf08L+1BK5vZEKDSK4oksRkJk0njEEKGh/Gs:3fa8L+iF+ZPkkE4h
- TLSH T192B23B0B73D258BDC617C038D5EB8BB1E233BD412235BA2E1525F1366D75EA0CB1E58A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nst4E6B.tmp\UserInfo.dll
- Size 7KB
- SHA256 633d83da20a8422a9841f604c01b3ba67b141b256849808716c118e136236721
- MD5 65960ce19034a8d411befc4f175e8335
- SHA1 244a24e25f072fb828e7f6b778f9930cb2e8a814
- SHA512 70d4924356efc4d31ebdf77a905d8ec31458f5be87f50a394e7c8f8feb8fefa98ed40eb245ea307d5ff9c7bbe8b257950f94276e93877fcd38e4bfc20441cc17
- SSDEEP 96:lyubewoiLOeI/Zhu0uzkrVdKNzv+2uKKbuajOS2gwiCsJ8rdbVtKbdj:wuC/h+BeKNzvuSW/
- TLSH T179E1B94FB3A12A96C456F27CC1FA5E227CF77D345536621D480111263D34AA1F335746
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nst4E6B.tmp\nsDialogs.dll
- Size 14KB
- SHA256 fd4a4deb99ddc9911846588d8b2d51021345007a5edd4b84ba99d974428400e7
- MD5 6854cf497bfac20ee60c6d41013a0a0f
- SHA1 cdd66550642d036aeda133dc32ca64a7d3a8429b
- SHA512 b1fddd5966c701af77891f7fd9ec4c628d2ec6267e0fb38c46c4d6d5796a64ecad04e917d5563f6d8589937b3e48c9cf0357722f0ccf573afe6a064c6ff5c2c4
- SSDEEP 192:nT8A5opfXXnnHluL/JZbFp6CLjKNzv2HUVChrltyHpE/HsgYsgxlSv:nTmfHlutZbHRXK5v2k2lcq/HpYpxl
- TLSH T11552082F3B469299C81EE338E5EF4B3297F3B8255635770E0359D604BD91A61CA3C18C
- MD5 SHA1 SHA512 SSDEEP TLSH