Analysis

  • max time kernel
    2734823s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    08/05/2022, 06:39

General

  • Target

    294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274.apk

  • Size

    4.2MB

  • MD5

    b05cf3251a5b9fc46f0c540f7db5b37a

  • SHA1

    c2c3e89f168465cfbb4b62ad60e74de8557156ad

  • SHA256

    294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

  • SHA512

    bd818b4ac8f36ff933aa138e5cc74cbe813735339d802a4c13afa8e4404f713a3bcf92d33c3de8fb8b91f814442ac6fd4d07817abae54fa7159bb65da2042709

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

  • BlackRock Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.ldxalw
    1⤵
    • Loads dropped Dex/Jar
    PID:6192
  • com.ldxalw:cproc
    1⤵
    • Loads dropped Dex/Jar
    PID:6234

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ldxalw/cache/payload.jar

    Filesize

    139KB

    MD5

    b947fedc579397df726bbbf6728500dd

    SHA1

    04be841ee419cc6cb6156c84dbc390dd9625fde2

    SHA256

    6362743cfc4998b0e2550f1e651ae196303d46fbbc4c8181869c3127cd19a73f

    SHA512

    72f5889d1fbdf4f80b36c1f4ff696e453ab6cee2f4958364b90a12a98c25839fef8efee1109d84260573adc5d8838e27bfecd31a03eab596bd25ac0af3c06776

  • /data/user/0/com.ldxalw/cache/payload.jar

    Filesize

    139KB

    MD5

    b947fedc579397df726bbbf6728500dd

    SHA1

    04be841ee419cc6cb6156c84dbc390dd9625fde2

    SHA256

    6362743cfc4998b0e2550f1e651ae196303d46fbbc4c8181869c3127cd19a73f

    SHA512

    72f5889d1fbdf4f80b36c1f4ff696e453ab6cee2f4958364b90a12a98c25839fef8efee1109d84260573adc5d8838e27bfecd31a03eab596bd25ac0af3c06776

  • /data/user/0/com.ldxalw/cache/payload.jar

    Filesize

    299KB

    MD5

    69f5b3017036984a4a79ccaa24a0124b

    SHA1

    7de9346958439794634f11cf84d4bc231da06de6

    SHA256

    81399b155ddb80f3acbe8cba67c0f6fc3b631935835ca2df572eff4a9cca7d39

    SHA512

    3429ad1e329cf12ea995ffc14660ec70c29aa1909d8abf5a3a48d4ec1f7bc8e48637f4fd758b4e72b820031ac7849b50ec0551cd1c23bdd48a9f7f88b7cf956b

  • /data/user/0/com.ldxalw/cache/payload.jar

    Filesize

    299KB

    MD5

    69f5b3017036984a4a79ccaa24a0124b

    SHA1

    7de9346958439794634f11cf84d4bc231da06de6

    SHA256

    81399b155ddb80f3acbe8cba67c0f6fc3b631935835ca2df572eff4a9cca7d39

    SHA512

    3429ad1e329cf12ea995ffc14660ec70c29aa1909d8abf5a3a48d4ec1f7bc8e48637f4fd758b4e72b820031ac7849b50ec0551cd1c23bdd48a9f7f88b7cf956b