blackrock | 294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

Analysis

Target
294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274.apk
Size 4.2MB
Sample220508-he2jbscehk
SHA256 294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274
MD5 b05cf3251a5b9fc46f0c540f7db5b37a
SHA1 c2c3e89f168465cfbb4b62ad60e74de8557156ad
SHA512 bd818b4ac8f36ff933aa138e5cc74cbe813735339d802a4c13afa8e4404f713a3bcf92d33c3de8fb8b91f814442ac6fd4d07817abae54fa7159bb65da2042709
MD5 SHA1 SHA512

Score

10^/10

BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
banker trojan infostealer blackrock

BlackRock Payload 2 IoCs

resource	yara_rule
behavioral2/memory/6192-0.dex	family_blackrock
behavioral2/memory/6234-0.dex	family_blackrock

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.ldxalw/cache/payload.jar	6192	com.ldxalw
/data/user/0/com.ldxalw/cache/payload.jar	6234	com.ldxalw:cproc

payload.jar

Path /data/user/0/com.ldxalw/cache/payload.jar
Size 139KB
SHA256 6362743cfc4998b0e2550f1e651ae196303d46fbbc4c8181869c3127cd19a73f
MD5 b947fedc579397df726bbbf6728500dd
SHA1 04be841ee419cc6cb6156c84dbc390dd9625fde2
SHA512 72f5889d1fbdf4f80b36c1f4ff696e453ab6cee2f4958364b90a12a98c25839fef8efee1109d84260573adc5d8838e27bfecd31a03eab596bd25ac0af3c06776
SSDEEP 3072:/UVxPFPakHtiJNG8DPiuYrOdMJZBp2tGSxo:/UVxVtGroYMDYG9
MD5 SHA1 SHA512 SSDEEP

Submit Download

payload.jar

Path /data/user/0/com.ldxalw/cache/payload.jar
Size 139KB
SHA256 6362743cfc4998b0e2550f1e651ae196303d46fbbc4c8181869c3127cd19a73f
MD5 b947fedc579397df726bbbf6728500dd
SHA1 04be841ee419cc6cb6156c84dbc390dd9625fde2
SHA512 72f5889d1fbdf4f80b36c1f4ff696e453ab6cee2f4958364b90a12a98c25839fef8efee1109d84260573adc5d8838e27bfecd31a03eab596bd25ac0af3c06776
SSDEEP 3072:/UVxPFPakHtiJNG8DPiuYrOdMJZBp2tGSxo:/UVxVtGroYMDYG9
MD5 SHA1 SHA512 SSDEEP

Submit Download

payload.jar

Path /data/user/0/com.ldxalw/cache/payload.jar
Size 299KB
SHA256 81399b155ddb80f3acbe8cba67c0f6fc3b631935835ca2df572eff4a9cca7d39
MD5 69f5b3017036984a4a79ccaa24a0124b
SHA1 7de9346958439794634f11cf84d4bc231da06de6
SHA512 3429ad1e329cf12ea995ffc14660ec70c29aa1909d8abf5a3a48d4ec1f7bc8e48637f4fd758b4e72b820031ac7849b50ec0551cd1c23bdd48a9f7f88b7cf956b
SSDEEP 6144:pys1E46heCUm5Kg9iEMy+tFrr5raYJYEQRQkuM50QxA+E:OHuXrrv7GuM50QxQ
MD5 SHA1 SHA512 SSDEEP

Download

payload.jar

Path /data/user/0/com.ldxalw/cache/payload.jar
Size 299KB
SHA256 81399b155ddb80f3acbe8cba67c0f6fc3b631935835ca2df572eff4a9cca7d39
MD5 69f5b3017036984a4a79ccaa24a0124b
SHA1 7de9346958439794634f11cf84d4bc231da06de6
SHA512 3429ad1e329cf12ea995ffc14660ec70c29aa1909d8abf5a3a48d4ec1f7bc8e48637f4fd758b4e72b820031ac7849b50ec0551cd1c23bdd48a9f7f88b7cf956b
SSDEEP 6144:pys1E46heCUm5Kg9iEMy+tFrr5raYJYEQRQkuM50QxA+E:OHuXrrv7GuM50QxQ
MD5 SHA1 SHA512 SSDEEP

Download