blackrock | da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7

Analysis

max time kernel
3844197s
max time network
166s
platform
android_x64
resource
android-x64-20220310-en
submitted
21-05-2022 03:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
Size

4.4MB
MD5

6810a90564f60dc65d8ea806438d6cce
SHA1

deb428f6c99b187906ec9e8faad5cb198443afc7
SHA256

da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7
SHA512

aadb2ec062bec607a57bd4596d0902eb237e0e5253ca64921808d0259ea6e6af9ed64ed5cc994662fb37ce97f20bba852bd5b92e74c5df01150580ae3ccf6af5

Score

10^/10

blackrock banker infostealer trojan

Malware Config

Signatures

BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
banker trojan infostealer blackrock

BlackRock Payload 2 IoCs

resource	yara_rule
behavioral2/memory/6028-0.dex	family_blackrock
behavioral2/memory/6066-0.dex	family_blackrock

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.mkfjvtla/cache/payload.jar	6028	com.mkfjvtla
/data/user/0/com.mkfjvtla/cache/payload.jar	6066	com.mkfjvtla:cproc

com.mkfjvtla
1⤵
- Loads dropped Dex/Jar
PID:6028

com.mkfjvtla:cproc
1⤵
- Loads dropped Dex/Jar
PID:6066

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.mkfjvtla/cache/payload.jar

Filesize
138KB

MD5
1737570f4cb8a0bbdb3e9f9553af5981

SHA1
1458ea294654f402f909410bdff9f17d762d76f6

SHA256
72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66

SHA512
48f4d48840bdc8e0abafed856fba1b77a3e190975e475a40d74cc9dc6375f3a80d2d0e8f5cc161a60a1c856ffeb36be52409df3f92a359dbb4910a893bf645f9

Download Submit
/data/user/0/com.mkfjvtla/cache/payload.jar

Filesize
138KB

MD5
1737570f4cb8a0bbdb3e9f9553af5981

SHA1
1458ea294654f402f909410bdff9f17d762d76f6

SHA256
72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66

SHA512
48f4d48840bdc8e0abafed856fba1b77a3e190975e475a40d74cc9dc6375f3a80d2d0e8f5cc161a60a1c856ffeb36be52409df3f92a359dbb4910a893bf645f9

Download Submit
/data/user/0/com.mkfjvtla/cache/payload.jar

Filesize
300KB

MD5
710a5677d720564f8e40b144fac89588

SHA1
1f1508653c60068c2fbaeebf6ef73aca57a3eec9

SHA256
084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686

SHA512
2e8546001aca1fa218e53b11d2693cd3e87221f4e5e969e35441fbbfb9180e5a3247c7d4b6cef2c24c3b4fbac8629d04dd6cca4c7eef1da3738f8dc41d68c32c

Download Submit
/data/user/0/com.mkfjvtla/cache/payload.jar

Filesize
300KB

MD5
710a5677d720564f8e40b144fac89588

SHA1
1f1508653c60068c2fbaeebf6ef73aca57a3eec9

SHA256
084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686

SHA512
2e8546001aca1fa218e53b11d2693cd3e87221f4e5e969e35441fbbfb9180e5a3247c7d4b6cef2c24c3b4fbac8629d04dd6cca4c7eef1da3738f8dc41d68c32c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads