bb197cf31687756f99b2576b94b7d852e75110e75f6dc86c831aa7a071d9f32e | Triage™

Login
Reports

Overview

overview

7

Static

static

3

geode-inst...in.exe

windows10-2004-x64

7

geode-inst...in.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

Geode.dll

windows10-2004-x64

1

Geode.dll

windows11-ltsc_2024-x64

1

GeodeUninstaller.exe

windows10-2004-x64

7

GeodeUninstaller.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

GeodeUpdater.exe

windows10-2004-x64

1

GeodeUpdater.exe

windows11-ltsc_2024-x64

1

VC_redist.x64.exe

windows10-2004-x64

4

VC_redist.x64.exe

windows11-ltsc_2024-x64

4

XInput1_4.dll

windows10-2004-x64

1

XInput1_4.dll

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
geode-installer-v4.10.1-win.exe
Size 42.7MB
Sample261110-2v9dnacb56
SHA256 bb197cf31687756f99b2576b94b7d852e75110e75f6dc86c831aa7a071d9f32e
MD5 cf2eb37e89aa5ea3e722aa5d64b8f2b5
SHA1 4d8b7e89aff97b4e2a5a5a9d566e088e58667062
SHA512 397b851cb2e931117f9822b69a519f586c21614df4aad97342a4e84b612d9d7d364a647b6441731f7641464a4cc417aeb4a5f0aa5fe9f1d2827bed961183379a
SSDEEP 786432:7O1fTqI3qHvEhS8fllN2rtcsjqnft/gsK38Y+c8kqUi:GfTqKqPEhSMuVKV/mMZzk1i
TLSH
T143A7330F254BC746E973DA7DEB5174BC0DC808915A8A45C7E29E0D57CCB4B23AB2E89C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

geode-installer-v4.10.1-win.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

geode-installer-v4.10.1-win.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Geode.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Geode.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

GeodeUninstaller.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral12

Sample

GeodeUninstaller.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral13

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral18

Sample

$PLUGINSDIR/nsDialogs.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

GeodeUpdater.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

GeodeUpdater.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

VC_redist.x64.exe

Resource

win10v2004-20260911-en

windows10-2004-x64

5 signatures

150 seconds

Behavioral task

behavioral22

Sample

VC_redist.x64.exe

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

5 signatures

150 seconds

Behavioral task

behavioral23

Sample

XInput1_4.dll

Resource

win10v2004-20260911-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

XInput1_4.dll

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  geode-installer-v4.10.1-win.exe
- Size 42.7MB
- SHA256 bb197cf31687756f99b2576b94b7d852e75110e75f6dc86c831aa7a071d9f32e
- MD5 cf2eb37e89aa5ea3e722aa5d64b8f2b5
- SHA1 4d8b7e89aff97b4e2a5a5a9d566e088e58667062
- SHA512 397b851cb2e931117f9822b69a519f586c21614df4aad97342a4e84b612d9d7d364a647b6441731f7641464a4cc417aeb4a5f0aa5fe9f1d2827bed961183379a
- SSDEEP 786432:7O1fTqI3qHvEhS8fllN2rtcsjqnft/gsK38Y+c8kqUi:GfTqKqPEhSMuVKV/mMZzk1i
- TLSH
  T143A7330F254BC746E973DA7DEB5174BC0DC808915A8A45C7E29E0D57CCB4B23AB2E89C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral1 behavioral2
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  Geode.dll
- Size 14.2MB
- SHA256 d38bd75517778d83e389241bbd71c492307ffc5b01ec7a9841f6e817f92e8b54
- MD5 456d0248d4731b1532d9b90272474617
- SHA1 c075b4fc53066862a43ad0f301f73c1528cad22a
- SHA512 77f399a59d297a8d15a71844da04a40fdda77293c4c594dd83467eee4b5d38e847172001b868cf6592293229b98a824cb61761be1c813e35da58ee76c589388c
- SSDEEP 98304:b2pB5C3A1TfACGgvGxxxlb6Tz9QFzzeXsEIbk0R8uZrm7U:ZQ1Tf6gVz9QFzzeXsEIbk03
- TLSH
  T133E64B213F0552FEC48BC078C25B46A65A6575CE0F79B7EF469592683E327FA2F38120
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  GeodeUninstaller.exe
- Size 160KB
- SHA256 34400e869a7d57f0e8ecb5e25a45ddddc9c033f14f8b5e143493ea94583a283e
- MD5 df3f41b507e297d67db64373c9cf32a7
- SHA1 767fdb4fe0e880557be16f64a826ab535d862494
- SHA512 55a6f1ae858a4b2e6cd734113f9ca6cf38bade2be0aed0ed2647434c599706ebfde029393b1f1b1f9cf4ac52040320618124c1e21e908d1b4f420b16ad068496
- SSDEEP 3072:Qrv+LsMjvFsOTb98xQT+5U5qwqv2/F6nqFHvZ6KBPUgkfyoT:UWLsKB0Iqv2/F6bKBPU/fD
- TLSH
  T1BEF38E1CBB75CFF6DC3188306697F6A74B21BD708A59960BEB110A37DC335A5F90A242
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral11 behavioral12
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 8KB
- SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
- MD5 313661ec12ed5ce1fd0b3292bf02cb69
- SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
- SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
- SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
- TLSH
  T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
- MD5 81e34f1c4b04a15dbce200c52f598f67
- SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
- SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
- SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
- TLSH
  T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
- MD5 2726673c720a296442c8ed134b41d169
- SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
- SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
- SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
- TLSH
  T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  GeodeUpdater.exe
- Size 76KB
- SHA256 f790e174ccc099438a02e82280ba122bfbedb9064760615f536c8f853876c0ff
- MD5 fae06b6cbb4775d08e6255e8cb731d33
- SHA1 6c77ab29936e4766b681986a0a6da4516dce0d1c
- SHA512 32333bc5fbd7ef3f58f756ba6892649bb863fa9febfad4a15666eae2ecc4123761f97599c5b4b3f0448f601cfc5b7f251634fc8b936a381c1771900c1a259c58
- SSDEEP 1536:O26SC3HdxSba/9cupii1mrbH/mPWYjiizSRKmq:EX3r0A9cu+rmPWYj5SRKm
- TLSH
  T1D573E7057A4554BDC88AC578838709A22D66B0CF1F32BBDF9385933D2E79AF82F34594
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  VC_redist.x64.exe
- Size 24.4MB
- SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
- MD5 486f81facf798678c3244c7cf35a557f
- SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
- SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
- SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
- TLSH
  T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral21 behavioral22
- Target
  XInput1_4.dll
- Size 47KB
- SHA256 88a9382e672fc0e3fe9acaa5836f25e5014fb7b8258b8d6f9e539d69353daec5
- MD5 8b47a84b1893ec7df921caddbfd97436
- SHA1 9bd546b3b80619a987a50e691a0718a5167240ce
- SHA512 4076fabca49afbbd31b59756316efd28c458019e666c2372ea9cb880090574ce3f1cc2cbc095c380824bf20a307e205e19ef4a7e96afdb4c6763d96c8976f4c3
- SSDEEP 768:HCjwQtylvUPN0dPRX1QoVLO8dACl5EUqD41K+ESL5J0i:HCj1TPNK91Qo1O8ll5Ey0UL5J0
- TLSH
  T191232A067B4150B9C846C0BC82470E5A29B6B0CE1F32B6DF43C5A32E2E797F95F35A95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

© 2018-2026

Terms | Privacy