8d14c56913f9536ce1d44673b124d74315fee68afbba54c0c4a96ed552b6bc41 | Triage™

Login
Reports

Overview

overview

8

Static

static

3

geode-inst...in.exe

windows10-2004-x64

7

geode-inst...in.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Geode.dll

windows10-2004-x64

1

Geode.dll

windows11-ltsc_2024-x64

1

GeodeUninstaller.exe

windows10-2004-x64

7

GeodeUninstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

GeodeUpdater.exe

windows10-2004-x64

4

GeodeUpdater.exe

windows11-ltsc_2024-x64

4

VC_redist.x64.exe

windows10-2004-x64

4

VC_redist.x64.exe

windows11-ltsc_2024-x64

4

XInput1_4.dll

windows10-2004-x64

8

XInput1_4.dll

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
geode-installer-v5.11.2-win.exe
Size 46.8MB
Sample261020-rmtccsax21
SHA256 8d14c56913f9536ce1d44673b124d74315fee68afbba54c0c4a96ed552b6bc41
MD5 3c081468fbac879ed6122c8e4b405122
SHA1 6e771da010eade731fd7f3b21bf3a0c05bf0155e
SHA512 a7510ab601c4223ad578052cef863ffd6484ca22798742775a0bc3a760592f8ea6d7a60b15a79cadde4ddb116f2b81df277c45d69e04a4db22934c7dbcb32d5c
SSDEEP 786432:nqMmGVztbiaLivCLSydmYNQjh+YZqlL9XzJiMTLaGZh2bVTrnUrU/4e12UUcheBO:nqm1t2aLivSSqYZCpDQMTLaGZWKmlRY4
TLSH
T1B1B733217D51B12CDE2129FC6F9191EF9AB58AD00F103647871A8FE29E36B65FB0D1B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v5.11.2-win.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

geode-installer-v5.11.2-win.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$PLUGINSDIR/nsExec.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

$PLUGINSDIR/nsExec.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Geode.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Geode.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

GeodeUninstaller.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral14

Sample

GeodeUninstaller.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

GeodeUpdater.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

11 signatures

150 seconds

Behavioral task

behavioral22

Sample

GeodeUpdater.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

Behavioral task

behavioral23

Sample

VC_redist.x64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral24

Sample

VC_redist.x64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral25

Sample

XInput1_4.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

XInput1_4.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  geode-installer-v5.11.2-win.exe
- Size 46.8MB
- SHA256 8d14c56913f9536ce1d44673b124d74315fee68afbba54c0c4a96ed552b6bc41
- MD5 3c081468fbac879ed6122c8e4b405122
- SHA1 6e771da010eade731fd7f3b21bf3a0c05bf0155e
- SHA512 a7510ab601c4223ad578052cef863ffd6484ca22798742775a0bc3a760592f8ea6d7a60b15a79cadde4ddb116f2b81df277c45d69e04a4db22934c7dbcb32d5c
- SSDEEP 786432:nqMmGVztbiaLivCLSydmYNQjh+YZqlL9XzJiMTLaGZh2bVTrnUrU/4e12UUcheBO:nqm1t2aLivSSqYZCpDQMTLaGZWKmlRY4
- TLSH
  T1B1B733217D51B12CDE2129FC6F9191EF9AB58AD00F103647871A8FE29E36B65FB0D1B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/nsExec.dll
- Size 10KB
- SHA256 0d7f702c518286a2d87db689af169c3857142324de4c9d76d51ebf639dced3df
- MD5 e78bcd3208bff839e612041895bb8d42
- SHA1 4b21b475b21d8f8bb2655d8e8e7d47548825831f
- SHA512 eb38959a877d1af4ae53f25407ede3172f990f8c824624f5a2f385cddbd71a437b9033d45042a0e40f7fb611ff48836be166d97d42f3c169babb063ef48e8e35
- SSDEEP 192:MItx8GSBYnUMu3Oad973Ykv/RGwC7ocJ4D4:bx8GOYnBu3Oad973YkvMwC7ocJ
- TLSH
  T12A22B8C9BA1579F5E0239838B18AF12F4D5D7C31DA2B840EE89A1E35B81F5E4571DB03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  Geode.dll
- Size 16.6MB
- SHA256 0c34f50454c102637038cae48c8c7dd685da3582fe474358024b1eb6833684d3
- MD5 5c08353efa7f87d8c4ebe505cfe949ae
- SHA1 195d322e6831698795a95aed00a57f8f6b82a9ec
- SHA512 2e3ee8bca96f96030b2ef40b3eeae21bb4db1688644d1966ef81265660f8ee3f43970f0893168c9957e6efd0cdf5d999846c375b8e2bf43b04dbfa3a6dba1c68
- SSDEEP 98304:64kmZKDUBxuZWjEH66rpRxzAEGaNkayOPk8t/rwALN+SyLWh0kbfP:oWjYFLB1DHyL00kb
- TLSH
  T1CE075C17F66B60EEC4BAC178438B62227A2074890735AFDB455096693F32FF46E3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  GeodeUninstaller.exe
- Size 159KB
- SHA256 0208c8075c3a3d0c4ccd0d943933796d791ee609f6c77921ce21131770932afd
- MD5 c43b7f7b64e929776a5009241233f610
- SHA1 1e7afced0779efc98c783756539dd79a13328493
- SHA512 1d22dd5ff6754d004f1e287c110b9356868fc6e408bc9f7a9f7de25d5b0a049b8043a7e9c3af7d559a4128c18c8d1fcb3a294caa5ec2388f231665b52d1d4758
- SSDEEP 3072:Qrv+LsMjvFsOTb98xQT+5U5qwqdSevFvzfnHduV:UWLsKB0IqdSedvzfn9uV
- TLSH
  T1E9F39E1CBB75CEF6DC3588315797F6AB4B21BD718919960BEB111A33DC33564FA0A202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral13 behavioral14
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  GeodeUpdater.exe
- Size 71KB
- SHA256 2f8c1343aed63bed3d3ac06886d2b27aed506b5b17bfa5999a2cb004a35ff5a2
- MD5 c1524c92eb0a916b9f219fdadb767cca
- SHA1 7ad72e1c25f84137f6c445ffd702ba28d8fbcdd4
- SHA512 0b4609990ec44d47f30034bc5e358a3835202629423d48d5f119de37ce1165d60458de7f52d66330c795b37a2ac68e7bd5604c426ba5033d5cf48bd6b1880f64
- SSDEEP 1536:JyXeDwE28yvfOIJ/Px4xpTuU+8zte9gQDPSm3:JyOcJXfOI9Px4xpKU+cte9gQ6M
- TLSH
  T118631805764699BDD48AC8BC92870AA61D6270CB1F31B9EF87C2533E2E35BF52F34584
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH
  T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral23 behavioral24
- Target
  XInput1_4.dll
- Size 49KB
- SHA256 20d6f0ac61ec820895ff25bc26558ddb877f37cc939d303257099ad5fc51e76c
- MD5 025b092cea9c873e28842ab8b3b0a60a
- SHA1 a24615d9663ed30452b79a61e33caf821e0612f9
- SHA512 be5ade23fcd16378495cb1637220a8f5207b3c96d3ad0d079ca3fa6d8cda44c33f35ba2c34484a3517b5a2f20af4f23e84bf77a8737a9ac0d9759e5027cf2d83
- SSDEEP 768:P2sBAasvYxsgRcj4gitqIyEHNxzjuFGSl+7ra8EZWEIMFZFR:P2sBsCCQqKHNZMfWra7+MFZFR
- TLSH
  T1B03329057B9644ACC4E6C5B886570E921972B0CA0F32E6EF8381933D2E757F92F39791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy