Overview

overview

10

Static

static

8

install.apk

android_x86

10

install.apk

android_x64

10

Analysis

  • max time kernel
    295809s
  • max time network
    165s
  • platform
    android_x86
  • resource
    android-x86-arm
  • submitted
    15-06-2021 21:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    install.apk

  • Size

    2.4MB

  • MD5

    81e5d4cb43893bd79d26fb589bb9d178

  • SHA1

    9f2278233e96766ea536d781c4bce7ba719ffb73

  • SHA256

    417c5edf9255d9320904204efaf804ddd9be754dcccc2e5f136a32c5a940f28a

  • SHA512

    0e6349c16fe35e3b9c7b47dec1f2f1719bdc7bb71688ec90f6422214ee6ca251538ae8ba79f21a46a8738e687b344e690793887ef2b1bfb45876d6db28724b3c

Score
10/10
blackrockbankerinfostealerobfuscationransomwaretrojan

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

    bankertrojaninfostealerblackrock
  • BlackRock Payload 3 IoCs
  • Loads dropped Dex/Jar 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware
  • Uses reflection 54 IoCs
    obfuscation

Processes

  • world.cool.excuse
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4642
    • world.cool.excuse
      2⤵
        PID:4835
      • /system/bin/dex2oat
        2⤵
        • Loads dropped Dex/Jar
        PID:4835
    • world.cool.excuse:cproc
      1⤵
      • Loads dropped Dex/Jar
      • Requests enabling of the accessibility settings.
      • Uses Crypto APIs (Might try to encrypt user data).
      • Uses reflection
      PID:4864

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads