geost | 1e13f46e3833e0a002c499a611b8f4b57b9716a0686b2a04ee701260c3f729e4

General

Target
1e13f46e3833e0a002c499a611b8f4b57b9716a0686b2a04ee701260c3f729e4
Size 260KB
Sample260718-s91wdsas6w
SHA256 1e13f46e3833e0a002c499a611b8f4b57b9716a0686b2a04ee701260c3f729e4
MD5 4e1af25f84200c7f63e315fe7ca07a9c
SHA1 bf8ab02ca059a9f665b863606fe7aff0506ee848
SHA512 74c5cd141cedd1ee236c04e4247f2e4cbb6e5b4705ae474c2a7f69f735c830e1fd8eea299c41100d1634aef78e628e547e91ce7ab4aa6fa6014841185d6a8fe8
SSDEEP 6144:T6sFRmgGUckkOzh4g3psPR65K8S+md5FrgL+ZWd+2v1phpPHP:WsjmgGUHzhZ8RarZqXMiZWd+2v1jp/P
TLSH
T1544422E3F151ED32C8BBDA32875413139F524E0A8F35D3298814F66F6A7674EA110EE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  1e13f46e3833e0a002c499a611b8f4b57b9716a0686b2a04ee701260c3f729e4
- Size 260KB
- SHA256 1e13f46e3833e0a002c499a611b8f4b57b9716a0686b2a04ee701260c3f729e4
- MD5 4e1af25f84200c7f63e315fe7ca07a9c
- SHA1 bf8ab02ca059a9f665b863606fe7aff0506ee848
- SHA512 74c5cd141cedd1ee236c04e4247f2e4cbb6e5b4705ae474c2a7f69f735c830e1fd8eea299c41100d1634aef78e628e547e91ce7ab4aa6fa6014841185d6a8fe8
- SSDEEP 6144:T6sFRmgGUckkOzh4g3psPR65K8S+md5FrgL+ZWd+2v1phpPHP:WsjmgGUHzhZ8RarZqXMiZWd+2v1jp/P
- TLSH
  T1544422E3F151ED32C8BBDA32875413139F524E0A8F35D3298814F66F6A7674EA110EE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

banker collection defense_evasion discovery evasion geost impact infostealer stealth trojan
- Family: Geost
  Geost is an Android banking trojan.
  banker trojan infostealer geost
- Removes its main activity from the application launcher
  stealth trojan evasion
- Checks Android system properties for emulator presence.
  defense_evasion
- Checks known Qemu pipes.
  Checks for known pipes used by the Android emulator to communicate with the host.
  defense_evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Queries information about running processes on the device
  Application may abuse the framework's APIs to collect information about running processes on the device.
  discovery
- Queries the phone number (MSISDN for GSM devices)
  discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
- Requests changing the default SMS application.
  collection impact
behavioral1