6fd7404952d95dbe21f897d2f22d710b5ea1d52e1cec420951ec03d23a4433df | Triage™

Login
Reports

Overview

overview

8

Static

static

3

geode-inst...in.exe

windows10-2004-x64

7

geode-inst...in.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Geode.dll

windows10-2004-x64

1

Geode.dll

windows11-ltsc_2024-x64

1

GeodeUninstaller.exe

windows10-2004-x64

7

GeodeUninstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

GeodeUpdater.exe

windows10-2004-x64

4

GeodeUpdater.exe

windows11-ltsc_2024-x64

4

VC_redist.x64.exe

windows10-2004-x64

4

VC_redist.x64.exe

windows11-ltsc_2024-x64

4

XInput1_4.dll

windows10-2004-x64

8

XInput1_4.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
geode-installer-v5.10.1-win.exe
Size 46.9MB
Sample260908-areakaycrf
SHA256 6fd7404952d95dbe21f897d2f22d710b5ea1d52e1cec420951ec03d23a4433df
MD5 10b0f9dd9ba5b14a7fb24cf3d4f9ce07
SHA1 57db6249f49169d3ba3240931a1edc9e7ddb6792
SHA512 80842d40821307a5fd920c6e2ab62cb9994e7396e6c54e357da2407051ae66c3881377dff4902911f49c7b3359c366ae5fcb154577ac82fe3c5f5726e1a9b38f
SSDEEP 786432:WfflFTT25uqIwPElCq2JHTlizPa+BCQ9eIj2IZKBYGNbcnOXDVC1G7pcRBhWSxT3:KtFusmO+NTlizPa+heB2pG1cnV2pczzB
TLSH
T145B7335DA7DC2C72EB20CCFDA1B1B2B3AC14AA34035F4061C558FD7E78845852EB6A76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v5.10.1-win.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

geode-installer-v5.10.1-win.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Geode.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Geode.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

GeodeUninstaller.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

GeodeUninstaller.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

GeodeUpdater.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral22

Sample

GeodeUpdater.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

11 signatures

150 seconds

Behavioral task

behavioral23

Sample

VC_redist.x64.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

VC_redist.x64.exe

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

XInput1_4.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral26

Sample

XInput1_4.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

13 signatures

150 seconds

discovery persistence ransomware

Malware Config

Targets

- Target
  geode-installer-v5.10.1-win.exe
- Size 46.9MB
- SHA256 6fd7404952d95dbe21f897d2f22d710b5ea1d52e1cec420951ec03d23a4433df
- MD5 10b0f9dd9ba5b14a7fb24cf3d4f9ce07
- SHA1 57db6249f49169d3ba3240931a1edc9e7ddb6792
- SHA512 80842d40821307a5fd920c6e2ab62cb9994e7396e6c54e357da2407051ae66c3881377dff4902911f49c7b3359c366ae5fcb154577ac82fe3c5f5726e1a9b38f
- SSDEEP 786432:WfflFTT25uqIwPElCq2JHTlizPa+BCQ9eIj2IZKBYGNbcnOXDVC1G7pcRBhWSxT3:KtFusmO+NTlizPa+heB2pG1cnV2pczzB
- TLSH
  T145B7335DA7DC2C72EB20CCFDA1B1B2B3AC14AA34035F4061C558FD7E78845852EB6A76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 10KB
- SHA256 0d7f702c518286a2d87db689af169c3857142324de4c9d76d51ebf639dced3df
- MD5 e78bcd3208bff839e612041895bb8d42
- SHA1 4b21b475b21d8f8bb2655d8e8e7d47548825831f
- SHA512 eb38959a877d1af4ae53f25407ede3172f990f8c824624f5a2f385cddbd71a437b9033d45042a0e40f7fb611ff48836be166d97d42f3c169babb063ef48e8e35
- SSDEEP 192:MItx8GSBYnUMu3Oad973Ykv/RGwC7ocJ4D4:bx8GOYnBu3Oad973YkvMwC7ocJ
- TLSH
  T12A22B8C9BA1579F5E0239838B18AF12F4D5D7C31DA2B840EE89A1E35B81F5E4571DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Geode.dll
- Size 17.1MB
- SHA256 2294c2fb5815ccb935cd462e5faaeed051f2bca784e90c3d76bd556a019b30f5
- MD5 2de281450b470e64d27a31072460ade8
- SHA1 90027c02ad7716935e0c9693e0b1847b1eb1abb6
- SHA512 4e473cbabc9a4df26beed5f249ce98022e98525c2dd0a9b6e9b72f9ccc3c89c2ed065cb45e70403dd7c65da36688c56a976bf8c1f9af61def469ab104f985033
- SSDEEP 98304:yRoBBf5J5nW0O6FNWNzKnHbGpp81+18tleErQavW399c01IeU8Xnfj4Kp/+PrSII:QQq09dnXfeL3XhoSI2JK0H
- TLSH
  T117075C07F66A20E9D4BAC078438B62237A7074880B35AFDB459096762F71BF47E3E754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GeodeUninstaller.exe
- Size 159KB
- SHA256 797e5a43d5f32b127e441a74adad5ceb94a9356ec044555d0bf90f702d4f6a10
- MD5 e35d37eafda32c967953900154a48860
- SHA1 004533e26846bf9b49f8f65be34614da650e34c7
- SHA512 dbd307dd11bdc66b7a5bcb2f171d6371d73800cee05a1de2c15c422f3651519bbda2691c426764c2e1c1a0ffb5fc31cede01b5f7f59aad1ad9f9e92493a68a68
- SSDEEP 3072:Qrv+LsMjvFsOTb98xQT+5U5qwqlyXvBGYVGzdwEXTo1BZ:UWLsKB0IqIvBGeGNXTo1BZ
- TLSH
  T1D9F38E1CBB768FF6D83189305697F6AB4F21BC75895A9B0BEB111633DC33554FA0A201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  GeodeUpdater.exe
- Size 71KB
- SHA256 349d22ef98f7588eec1a46bfb73bc40ac3b998c40e639386754dc5c313c7c6ff
- MD5 676471b22d1608a8953c924c1b7d3a8e
- SHA1 43348bbea4fd787141a578e74aac2e4a2eff7351
- SHA512 dc0aa9208c1b4fa2fec4da83085c60563f5cfba852a60ba547e85c5b838d0cf0e324034d82ca7ac73b320d7cca6a503f1984469135b2290e820e652555a738fc
- SSDEEP 1536:fyXeDwE28yvfOIJ/Px4xpTuU+mte9gQDPSm3:fyOcJXfOI9Px4xpKU+mte9gQ6M
- TLSH
  T1E3630805764699BDD48AC8BC92870AA61D6270CB1F31B9EF87C2533E2E35BF52F34584
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH
  T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  XInput1_4.dll
- Size 49KB
- SHA256 c5bee96cbb1194a2752e9c43254ee0495652fc135dfb7a061c7b6c54bb99fd0a
- MD5 1b15bb4216f329941bdd4bc303ba97cb
- SHA1 dd19552beb7d2dc4cd4e5743338d7ded22ee22fd
- SHA512 1a0ae16af24a71cbb5113eccc786c5ba9fe85339ac9b8f6be1b45c3d39da354564f4e8e8cccbeb9d725ee7392597a8b5f46f643360701d7c8cc5a9985ddf255c
- SSDEEP 768:j2sBAasvYxsgRcj4gitqIyEHNxzjuFGSl1era8EZWEIMFZFR:j2sBsCCQqKHNZMfyra7+MFZFR
- TLSH
  T1373339057B9644ACC4E6C5B886570E921972B0CA0F32E6EF8381933D2E757F92F39791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

discoverypersistenceransomware

© 2018-2026

Terms | Privacy