Overview

overview

10

Static

static

7

69f31e89d2...d7.apk

android_x86

10

69f31e89d2...d7.apk

android_x64

10

69f31e89d2...d7.apk

android_x64

Analysis

  • max time kernel
    3844060s
  • max time network
    150s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 03:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7.apk

  • Size

    4.3MB

  • MD5

    cc98be170a7e6878172105eca0cb7997

  • SHA1

    8ff5df1bd116500238ea4e4a57b24ab692e7e3bc

  • SHA256

    69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7

  • SHA512

    ffff2b68df06ccaedd537389e9db1fc55aa650357da59b277b63b5c5f6522e0f4e32713809bcb3a5d13c7e5c9125e266c3d28e447ab6c0d909df8488dd4dec70

Score
10/10
blackrockbankerinfostealertrojan

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

    bankertrojaninfostealerblackrock
  • BlackRock Payload 3 IoCs
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.cbthrqtys
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:5178
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.cbthrqtys/cache/payload.jar --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.cbthrqtys/cache/oat/x86/payload.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5243
  • com.cbthrqtys:cproc
    1⤵
    • Loads dropped Dex/Jar
    PID:5325

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.cbthrqtys/cache/oat/payload.jar.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/oat/x86/payload.odex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/oat/x86/payload.vdex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar
    Filesize

    139KB

    MD5

    0866cd107157d409e407e8dcb00306d8

    SHA1

    875bc1d47aa0a7173ddea7f150695ec95758f46e

    SHA256

    478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

    SHA512

    72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar
    Filesize

    139KB

    MD5

    0866cd107157d409e407e8dcb00306d8

    SHA1

    875bc1d47aa0a7173ddea7f150695ec95758f46e

    SHA256

    478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

    SHA512

    72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar
    Filesize

    300KB

    MD5

    420e446f43ed445b0461a6a07090fc7a

    SHA1

    27bafc311dcf26a6f0214a2f0c201d23a356b78f

    SHA256

    1a5b0e4602b6c5db1a805885c1297280b2ddd00553e2bd61b8e12e801a6786d2

    SHA512

    7b4bdf7f0fb284553aa57b84e5e2b47ea56e835623217839ae6bfae45868fb9d49853c41aadbbe2a3d698d5db6c6040ae7193dad9a4d2dff7b3e0936d21c50c3

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar
    Filesize

    300KB

    MD5

    15e8481dddc557be0d5b66a40b440b5f

    SHA1

    2ebe04c32c3ad8a63a36e21b29afd3afa256bdc1

    SHA256

    94d920ef69b5b6744f5fb61afa31cbe8f36febef18c02ca878f413d88defef8f

    SHA512

    321ba9977bd9e6ac599e313088ad36a8010cb4aee6c680d9afdeddbdd6b29b3aabb8264f0ae680cae2a64dd05e0051f8db9873c8d3f788b119a4fc6d47e72c93

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar
    Filesize

    300KB

    MD5

    420e446f43ed445b0461a6a07090fc7a

    SHA1

    27bafc311dcf26a6f0214a2f0c201d23a356b78f

    SHA256

    1a5b0e4602b6c5db1a805885c1297280b2ddd00553e2bd61b8e12e801a6786d2

    SHA512

    7b4bdf7f0fb284553aa57b84e5e2b47ea56e835623217839ae6bfae45868fb9d49853c41aadbbe2a3d698d5db6c6040ae7193dad9a4d2dff7b3e0936d21c50c3

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.cbthrqtys/cache/payload.jar.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit