blackrock | 69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7

Analysis

max time kernel
3844045s
max time network
167s
platform
android_x64
resource
android-x64-20220310-en
submitted
21-05-2022 03:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7.apk
Size

4.3MB
MD5

cc98be170a7e6878172105eca0cb7997
SHA1

8ff5df1bd116500238ea4e4a57b24ab692e7e3bc
SHA256

69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7
SHA512

ffff2b68df06ccaedd537389e9db1fc55aa650357da59b277b63b5c5f6522e0f4e32713809bcb3a5d13c7e5c9125e266c3d28e447ab6c0d909df8488dd4dec70

Score

10^/10

blackrock banker infostealer trojan

Malware Config

Signatures

BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
banker trojan infostealer blackrock

BlackRock Payload 2 IoCs

Processes:

resource	yara_rule
/data/user/0/com.cbthrqtys/cache/payload.jar	family_blackrock
/data/user/0/com.cbthrqtys/cache/payload.jar	family_blackrock

Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.cbthrqtyscom.cbthrqtys:cproc

ioc pid process

/data/user/0/com.cbthrqtys/cache/payload.jar 6365 com.cbthrqtys
/data/user/0/com.cbthrqtys/cache/payload.jar 6403 com.cbthrqtys:cproc

ioc	pid	process
/data/user/0/com.cbthrqtys/cache/payload.jar	6365	com.cbthrqtys
/data/user/0/com.cbthrqtys/cache/payload.jar	6403	com.cbthrqtys:cproc

com.cbthrqtys
1⤵
- Loads dropped Dex/Jar
PID:6365

com.cbthrqtys:cproc
1⤵
- Loads dropped Dex/Jar
PID:6403

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.cbthrqtys/cache/oat/payload.jar.cur.prof

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
139KB

MD5
0866cd107157d409e407e8dcb00306d8

SHA1
875bc1d47aa0a7173ddea7f150695ec95758f46e

SHA256
478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

SHA512
72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
139KB

MD5
0866cd107157d409e407e8dcb00306d8

SHA1
875bc1d47aa0a7173ddea7f150695ec95758f46e

SHA256
478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

SHA512
72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
300KB

MD5
15e8481dddc557be0d5b66a40b440b5f

SHA1
2ebe04c32c3ad8a63a36e21b29afd3afa256bdc1

SHA256
94d920ef69b5b6744f5fb61afa31cbe8f36febef18c02ca878f413d88defef8f

SHA512
321ba9977bd9e6ac599e313088ad36a8010cb4aee6c680d9afdeddbdd6b29b3aabb8264f0ae680cae2a64dd05e0051f8db9873c8d3f788b119a4fc6d47e72c93

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
300KB

MD5
15e8481dddc557be0d5b66a40b440b5f

SHA1
2ebe04c32c3ad8a63a36e21b29afd3afa256bdc1

SHA256
94d920ef69b5b6744f5fb61afa31cbe8f36febef18c02ca878f413d88defef8f

SHA512
321ba9977bd9e6ac599e313088ad36a8010cb4aee6c680d9afdeddbdd6b29b3aabb8264f0ae680cae2a64dd05e0051f8db9873c8d3f788b119a4fc6d47e72c93

Download Submit