8d22e2ac6739d63317c166827056e4328e6415340bf20ffe4f0dcb21c57de65f | Triage™

Login
Reports

Overview

overview

8

Static

static

3

geode-inst...in.exe

windows10-2004-x64

7

geode-inst...in.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Geode.dll

windows10-2004-x64

1

Geode.dll

windows11-ltsc_2024-x64

1

GeodeUninstaller.exe

windows10-2004-x64

7

GeodeUninstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

GeodeUpdater.exe

windows10-2004-x64

4

GeodeUpdater.exe

windows11-ltsc_2024-x64

4

VC_redist.x64.exe

windows10-2004-x64

4

VC_redist.x64.exe

windows11-ltsc_2024-x64

4

XInput1_4.dll

windows10-2004-x64

8

XInput1_4.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
geode-installer-v5.6.1-win.exe
Size 46.2MB
Sample260827-esb9tagb94
SHA256 8d22e2ac6739d63317c166827056e4328e6415340bf20ffe4f0dcb21c57de65f
MD5 6db40a34460133198bf17877d8e64978
SHA1 69577c4cc30ffb252ffef78654b4ab4b8832e965
SHA512 78d9605a7b79800fd95daa72a7098190f5b18fc942f1550e9a9d4ce884837953d9392cd95662f6d8ea634c76f5cbddd2fb99bbae4909a624d323c4682f6b0ade
SSDEEP 786432:KWwguAvTss4y4Dv0s1sqOuV7MqYcsVlzy8fh2xe/cmaY4nLhpOfg/G/cAN74/CXP:yETsXyDeaTjzyyNXafnN2gPZY
TLSH
T15DB7337E4EFECDDCD72AB0726D89E4F265D3E5A021A42E2EC2C13B223B179177519460
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v5.6.1-win.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral2

Sample

geode-installer-v5.6.1-win.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral11

Sample

Geode.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral12

Sample

Geode.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

300 seconds

Behavioral task

behavioral13

Sample

GeodeUninstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral14

Sample

GeodeUninstaller.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral21

Sample

GeodeUpdater.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

300 seconds

Behavioral task

behavioral22

Sample

GeodeUpdater.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

300 seconds

Behavioral task

behavioral23

Sample

VC_redist.x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

300 seconds

Behavioral task

behavioral24

Sample

VC_redist.x64.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

300 seconds

Behavioral task

behavioral25

Sample

XInput1_4.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

300 seconds

Behavioral task

behavioral26

Sample

XInput1_4.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

300 seconds

Malware Config

Targets

- Target
  geode-installer-v5.6.1-win.exe
- Size 46.2MB
- SHA256 8d22e2ac6739d63317c166827056e4328e6415340bf20ffe4f0dcb21c57de65f
- MD5 6db40a34460133198bf17877d8e64978
- SHA1 69577c4cc30ffb252ffef78654b4ab4b8832e965
- SHA512 78d9605a7b79800fd95daa72a7098190f5b18fc942f1550e9a9d4ce884837953d9392cd95662f6d8ea634c76f5cbddd2fb99bbae4909a624d323c4682f6b0ade
- SSDEEP 786432:KWwguAvTss4y4Dv0s1sqOuV7MqYcsVlzy8fh2xe/cmaY4nLhpOfg/G/cAN74/CXP:yETsXyDeaTjzyyNXafnN2gPZY
- TLSH
  T15DB7337E4EFECDDCD72AB0726D89E4F265D3E5A021A42E2EC2C13B223B179177519460
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 10KB
- SHA256 0d7f702c518286a2d87db689af169c3857142324de4c9d76d51ebf639dced3df
- MD5 e78bcd3208bff839e612041895bb8d42
- SHA1 4b21b475b21d8f8bb2655d8e8e7d47548825831f
- SHA512 eb38959a877d1af4ae53f25407ede3172f990f8c824624f5a2f385cddbd71a437b9033d45042a0e40f7fb611ff48836be166d97d42f3c169babb063ef48e8e35
- SSDEEP 192:MItx8GSBYnUMu3Oad973Ykv/RGwC7ocJ4D4:bx8GOYnBu3Oad973YkvMwC7ocJ
- TLSH
  T12A22B8C9BA1579F5E0239838B18AF12F4D5D7C31DA2B840EE89A1E35B81F5E4571DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Geode.dll
- Size 16.3MB
- SHA256 2bf6ce1d1b8ec45813a3af0a823b6a5c7b87032de1ccddfe92c6df96ad62d6af
- MD5 429cc0219c3820e032b4b6b1d3dc2479
- SHA1 b0025d6c3537fe3d02f7c5b763b1252a7b2d3e8c
- SHA512 dd76833120af4d3314452a34b78140e8b5e598fb7b33bfaaf237fb6aa56099b9fc691a5232ea9a3e0cd6bf9c58fee010911c22cfe54a4f439719119551704fce
- SSDEEP 98304:UuquhJdhfxXIPrrWZPSdprHa8C6S90FbDRRTLwgpDAtG0rXWVU++fb+0rDGjZK:n5190xNxTEHr2S+0z
- TLSH
  T1FC074C17F66A20E9E4BAC178438B62237A7074980B34AFDB459196762F31BF47E3D704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GeodeUninstaller.exe
- Size 159KB
- SHA256 ea5c8fa027a67b8e3468129d4631e3ef22d486d9f892443948dff748a4f4b346
- MD5 866533d7c888abc0fad0a5f1584d9a80
- SHA1 ebef55c4a875b4e067a031506186a48b4767e13f
- SHA512 89ed689460448a0a150e5b8fe64d0bbcddc996e0f8ac587918d5a6b42c0cb9aef329e8f163bb17097fe6e3fba06b6ba8698179f0d110e24c4df2b2f564cceaf9
- SSDEEP 3072:Qrv+LsMjvFsOTb98xQT+5U5qwqMn0iaYW5wm90lyl5T:UWLsKB0Iq1YWL4yl5T
- TLSH
  T1DCF38D1CBB76CFF6DC3188315797F6AB4B25BD70891A960BE7111A23DC33565FA0A202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  GeodeUpdater.exe
- Size 70KB
- SHA256 63582d516c68ade94e0de74637c185d6da238806c9f145a00a165dec516b1327
- MD5 b2a387bc6193477cc649f2f477b7cca2
- SHA1 7f0fbe246b45c6479c9e0879d6587242c2b33c2f
- SHA512 338b5e306102dcf6b48202836f1400501af061cdb90f00ac1198941173084e5d836c1e3e229fdb82529c21bd0a4b7fcbcc9692f3b3153991d0497cdee7733f96
- SSDEEP 1536:EyXeDwE28yvfOIJ/Px4xpTuU+mte9gQDPp3:EyOcJXfOI9Px4xpKU+mte9gQ1
- TLSH
  T13F6318057A0699BDD48AC8FC928709A61D6270CB1F71B9EF87C2523E2E35BF52F34584
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH
  T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  XInput1_4.dll
- Size 47KB
- SHA256 879ce24dbf918a6c3212c1dd0efe761a3eb4da703b93133149aa207aacbfb68e
- MD5 13642527626fef56a859163f142eaab7
- SHA1 3c1e7ea2fd1e66e71328a7bf182a1ae340cd7f5b
- SHA512 554fa5d34fb345d15d3501467a6c2de8b9c1926bfc182e57809f5e47d2995216489093fc12047986249b4b2148fd7e50f573ae294268837c5b988c1c5d80880d
- SSDEEP 768:Y1U0dlbPx03jF5Htq5zUFIjGznwwera87HKSyXrYp:YyOb8tqeFvMraAHKSy7Yp
- TLSH
  T10D231A057B4644ACC8A6C4B882474E861972B0CA1F32F6EF93D0923D2E757F96F39791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy