Overview

overview

10

Static

static

7

da96daccff...d7.apk

android_x86

10

da96daccff...d7.apk

android_x64

10

da96daccff...d7.apk

android_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7

  • Size

    4.4MB

  • Sample

    220521-eabwbshag8

  • MD5

    6810a90564f60dc65d8ea806438d6cce

  • SHA1

    deb428f6c99b187906ec9e8faad5cb198443afc7

  • SHA256

    da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7

  • SHA512

    aadb2ec062bec607a57bd4596d0902eb237e0e5253ca64921808d0259ea6e6af9ed64ed5cc994662fb37ce97f20bba852bd5b92e74c5df01150580ae3ccf6af5

Score
10/10
blackrockandroidbankerinfostealertrojan

Malware Config

Targets

    • Target

      da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7

    • Size

      4.4MB

    • MD5

      6810a90564f60dc65d8ea806438d6cce

    • SHA1

      deb428f6c99b187906ec9e8faad5cb198443afc7

    • SHA256

      da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7

    • SHA512

      aadb2ec062bec607a57bd4596d0902eb237e0e5253ca64921808d0259ea6e6af9ed64ed5cc994662fb37ce97f20bba852bd5b92e74c5df01150580ae3ccf6af5

    Score
    10/10
    blackrockbankerinfostealertrojan

    • BlackRock

      BlackRock is an android banker based on Xerxes banking Trojan.

      bankertrojaninfostealerblackrock

    • BlackRock Payload

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks