blackrock | 69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7

Analysis

max time kernel
3844045s
max time network
167s
platform
android_x64
resource
android-x64-20220310-en
submitted
21-05-2022 03:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7.apk
Size

4.3MB
MD5

cc98be170a7e6878172105eca0cb7997
SHA1

8ff5df1bd116500238ea4e4a57b24ab692e7e3bc
SHA256

69f31e89d24f1fa4bc66f30232283fbee716ebecfeadc123a48887288afeaed7
SHA512

ffff2b68df06ccaedd537389e9db1fc55aa650357da59b277b63b5c5f6522e0f4e32713809bcb3a5d13c7e5c9125e266c3d28e447ab6c0d909df8488dd4dec70

Score

10^/10

blackrock banker infostealer trojan

Malware Config

Signatures

BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
banker trojan infostealer blackrock

BlackRock Payload 2 IoCs

resource	yara_rule
behavioral2/memory/6365-0.dex	family_blackrock
behavioral2/memory/6403-0.dex	family_blackrock

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.cbthrqtys/cache/payload.jar	6365	com.cbthrqtys
/data/user/0/com.cbthrqtys/cache/payload.jar	6403	com.cbthrqtys:cproc

com.cbthrqtys
1⤵
- Loads dropped Dex/Jar
PID:6365

com.cbthrqtys:cproc
1⤵
- Loads dropped Dex/Jar
PID:6403

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
139KB

MD5
0866cd107157d409e407e8dcb00306d8

SHA1
875bc1d47aa0a7173ddea7f150695ec95758f46e

SHA256
478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

SHA512
72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
139KB

MD5
0866cd107157d409e407e8dcb00306d8

SHA1
875bc1d47aa0a7173ddea7f150695ec95758f46e

SHA256
478596f8be5d643a1590e0ceb320d76f889965ca22572aef50ac47968997925b

SHA512
72c1cdaf874a558aa8522d452b0f97312aed32f4b27da70e4d3c5ac3b5cecda544ee03711af1af9d236ecb767e54b54c93c500a9449b8dc2b496deabb160bb96

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
300KB

MD5
15e8481dddc557be0d5b66a40b440b5f

SHA1
2ebe04c32c3ad8a63a36e21b29afd3afa256bdc1

SHA256
94d920ef69b5b6744f5fb61afa31cbe8f36febef18c02ca878f413d88defef8f

SHA512
321ba9977bd9e6ac599e313088ad36a8010cb4aee6c680d9afdeddbdd6b29b3aabb8264f0ae680cae2a64dd05e0051f8db9873c8d3f788b119a4fc6d47e72c93

Download Submit
/data/user/0/com.cbthrqtys/cache/payload.jar

Filesize
300KB

MD5
15e8481dddc557be0d5b66a40b440b5f

SHA1
2ebe04c32c3ad8a63a36e21b29afd3afa256bdc1

SHA256
94d920ef69b5b6744f5fb61afa31cbe8f36febef18c02ca878f413d88defef8f

SHA512
321ba9977bd9e6ac599e313088ad36a8010cb4aee6c680d9afdeddbdd6b29b3aabb8264f0ae680cae2a64dd05e0051f8db9873c8d3f788b119a4fc6d47e72c93

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads