0fc9785044a90382b6af932ddfd3f00b9f74cbb53bf53ee83797a17559f946dc | Triage™

Login
Reports

Overview

overview

8

Static

static

3

geode-inst...in.exe

windows10-2004-x64

7

geode-inst...in.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Geode.dll

windows10-2004-x64

1

Geode.dll

windows11-ltsc_2024-x64

1

GeodeUninstaller.exe

windows10-2004-x64

7

GeodeUninstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

GeodeUpdater.exe

windows10-2004-x64

4

GeodeUpdater.exe

windows11-ltsc_2024-x64

4

VC_redist.x64.exe

windows10-2004-x64

4

VC_redist.x64.exe

windows11-ltsc_2024-x64

4

XInput1_4.dll

windows10-2004-x64

8

XInput1_4.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
geode-installer-v5.8.2-win.exe
Size 46.5MB
Sample260803-rmfq9ssxe1
SHA256 0fc9785044a90382b6af932ddfd3f00b9f74cbb53bf53ee83797a17559f946dc
MD5 b52d70bb354589db610df40839ca147a
SHA1 d34b6491c8f021d295469a9e6e370bff56324a3f
SHA512 2c017cf8c3342637c1c64ecf81fddd242400090584f58109fa068ddb99726f68c24275f211f6d73f91d231804f4983f0ea011f56743c7f8a1dcad2e6e114475b
SSDEEP 786432:4PiN8rkSxWiJ0rW1oAFPlYuf08/z4Gf63IPCUZ6LNNJNs9CltN:AiNik5VQNn4lezSns9wN
TLSH
T1B1B733892703CBC1F914303685A676E58314A9F56A9F335FC76ABF4F9650276230EBB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v5.8.2-win.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral2

Sample

geode-installer-v5.8.2-win.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral11

Sample

Geode.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

Geode.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

GeodeUninstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral14

Sample

GeodeUninstaller.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

300 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral21

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral22

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral23

Sample

GeodeUpdater.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral24

Sample

GeodeUpdater.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral25

Sample

VC_redist.x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral26

Sample

VC_redist.x64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral27

Sample

XInput1_4.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral28

Sample

XInput1_4.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

14 signatures

300 seconds

discovery persistence ransomware

Malware Config

Targets

- Target
  geode-installer-v5.8.2-win.exe
- Size 46.5MB
- SHA256 0fc9785044a90382b6af932ddfd3f00b9f74cbb53bf53ee83797a17559f946dc
- MD5 b52d70bb354589db610df40839ca147a
- SHA1 d34b6491c8f021d295469a9e6e370bff56324a3f
- SHA512 2c017cf8c3342637c1c64ecf81fddd242400090584f58109fa068ddb99726f68c24275f211f6d73f91d231804f4983f0ea011f56743c7f8a1dcad2e6e114475b
- SSDEEP 786432:4PiN8rkSxWiJ0rW1oAFPlYuf08/z4Gf63IPCUZ6LNNJNs9CltN:AiNik5VQNn4lezSns9wN
- TLSH
  T1B1B733892703CBC1F914303685A676E58314A9F56A9F335FC76ABF4F9650276230EBB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 10KB
- SHA256 0d7f702c518286a2d87db689af169c3857142324de4c9d76d51ebf639dced3df
- MD5 e78bcd3208bff839e612041895bb8d42
- SHA1 4b21b475b21d8f8bb2655d8e8e7d47548825831f
- SHA512 eb38959a877d1af4ae53f25407ede3172f990f8c824624f5a2f385cddbd71a437b9033d45042a0e40f7fb611ff48836be166d97d42f3c169babb063ef48e8e35
- SSDEEP 192:MItx8GSBYnUMu3Oad973Ykv/RGwC7ocJ4D4:bx8GOYnBu3Oad973YkvMwC7ocJ
- TLSH
  T12A22B8C9BA1579F5E0239838B18AF12F4D5D7C31DA2B840EE89A1E35B81F5E4571DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Geode.dll
- Size 16.4MB
- SHA256 61847e05d4aa416bfd4d1f4e026b5b0e66848756473b285add6233a5cc9356d2
- MD5 a2f4968c65fc370c4e2be3b7d9f94250
- SHA1 bddd902428f533ba3f737e9ce0d9cedb1eb74388
- SHA512 7e873c50ce2df4dadf80ea9fd6d0601664da084339b865757ce836757d485b72ce27d1e967c4c8838902c4e105d3bae6d4e90903834f821340ea2b18c5514b46
- SSDEEP 196608:1wsA50ploPqXbV4xKxd+0q32T7/9q8dGuyiWNFKB1SDb:WylWqLxx00
- TLSH
  T1FE074B07F66A20E9D4BAC178438B62237A3178980B34AFDB465056762F71BF47E3E744
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GeodeUninstaller.exe
- Size 160KB
- SHA256 5d9e8a4caa3ed75647825b03ca68c6e6e5593824c066bea87167f1f5c86c1636
- MD5 dc28727f9cc27f1f64af2d7cea5f6da9
- SHA1 7781fd749464da76f3a1627c1ee6988f1b78991c
- SHA512 bb501616176bee9d000975b9263de09814fcda620ab02302dcc5b876efbe5fd6a1d3bbba55b715c32fcf42f2b5cf8efd31b5f272c89dcc29a7f5e168d2d76638
- SSDEEP 3072:Qrv+LsMjvFsOTb98xQT+5U5qwqCd4q8MH2AL5Io:UWLsKB0IqU8MFLOo
- TLSH
  T1B4F38D1CBB71CEF6DC3589306697FAAB4B217C71495A960BEB115B33DC33564FA0A202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 201KB
- SHA256 4873a57c9b2d697e4f8689ff7a2f785fb836a6289bc377320987b5541856234c
- MD5 3c5626cfc549b9a2fc147f84601a68b1
- SHA1 df2015ab7aa2eb9943cc5929fb9f7ec14a26b71e
- SHA512 b076a7c5350a8fda2f641c052bab4f87a602f313c91a3c0ceab2da45f9753cd89ee97497a5c67552e65a97de1366e69bfc531f6b728224e86314b90b91fd9511
- SSDEEP 384:Gx1uncOx0y1ARSzKyHOTEdWTBSYY0Z9XENc5iXbu8naAQHmUn0R/V8jQ1P6g1PKF:0uxVMsf8EbFGHmLRt8jQ1iE95CP
- TLSH
  T18114E0EC7FDDC8D1F21AF83871651B08C87B88DA1A03145CDABE946F93AC694B5C7621
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  GeodeUpdater.exe
- Size 70KB
- SHA256 6b9f20ba7b4b6893009cb521eb2dc1f4dba6a77a6d9c7fa9e32ba894f0682f20
- MD5 07038935e986b834ac334134cad73836
- SHA1 e1f99d0152a76ecb7354da33e2442c281f6b9676
- SHA512 665a2a91f34ccabf2b76729e410fa3a1038b7d1c63e4ea0568558d3297ef762cba4b79d3f5058f0db4c7be0a71963711655e49842885527fb1571ee1fff3b3e2
- SSDEEP 1536:GyXeDwE28yvfOIJ/Px4xpTuU+mte9gQDPp3:GyOcJXfOI9Px4xpKU+mte9gQ1
- TLSH
  T1136318057A0699BDD48AC8FC928709A61D6270CB1F71B9EF87C2523E2E35BF52F34584
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH
  T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral25 behavioral26
- Target
  XInput1_4.dll
- Size 48KB
- SHA256 29bcd095d47daaa89c0aae3cc826962022dcfe7bbc63b23360183e129be68283
- MD5 19995e09c44f8fc8f0adc60c41495fde
- SHA1 ea41b338289f30e451e16716f878f514336bea0f
- SHA512 02ccd1d28caf7b2337ddb76623a61c9317d8b9c4101a404fd93309c5a46b969b92189be55e2c6f8c54191a77be7b348749af920b8c1690d6e95dd018545ec805
- SSDEEP 768:92sBAasvYxsgRcj4gitqIyEHNxzjuFGSl1era8EZWEIMFiaR:92sBsCCQqKHNZMfyra7+MFiaR
- TLSH
  T1B3233805BB5644ACC4E6C5B886570E911A72B0CA0F32E6EF8381933D2E757F92F39791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral27 behavioral28

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

discoverypersistenceransomware

© 2018-2026

Terms | Privacy