Analysis
- max time kernel
3844197s - max time network
166s - platform
android_x64 - resource
android-x64-20220310-en - submitted
21/05/2022, 03:43
Static task
static1
Behavioral task
behavioral1
Sample
da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
Resource
android-x86-arm-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
Resource
android-x64-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
Resource
android-x64-arm64-20220310-en
0 signatures
0 seconds
General
- Target da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
- Size 4.4MB
- Sample220521-eabwbshag8
- SHA256 da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7
- MD5 6810a90564f60dc65d8ea806438d6cce
- SHA1 deb428f6c99b187906ec9e8faad5cb198443afc7
- SHA512 aadb2ec062bec607a57bd4596d0902eb237e0e5253ca64921808d0259ea6e6af9ed64ed5cc994662fb37ce97f20bba852bd5b92e74c5df01150580ae3ccf6af5
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
- BlackRock Payload 2 IoCs
resource yara_rule behavioral2/memory/6028-0.dex family_blackrock behavioral2/memory/6066-0.dex family_blackrock - Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.mkfjvtla/cache/payload.jar 6028 com.mkfjvtla /data/user/0/com.mkfjvtla/cache/payload.jar 6066 com.mkfjvtla:cproc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.mkfjvtla/cache/payload.jar
- Size 138KB
- SHA256 72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66
- MD5 1737570f4cb8a0bbdb3e9f9553af5981
- SHA1 1458ea294654f402f909410bdff9f17d762d76f6
- SHA512 48f4d48840bdc8e0abafed856fba1b77a3e190975e475a40d74cc9dc6375f3a80d2d0e8f5cc161a60a1c856ffeb36be52409df3f92a359dbb4910a893bf645f9
- SSDEEP 3072:GY17cy/23udLzzcPOq7XgpOKkSB3oVJb8rm/YF3mbKUmPb:X1cRCcPOqbC1kesN/Ytv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.mkfjvtla/cache/payload.jar
- Size 138KB
- SHA256 72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66
- MD5 1737570f4cb8a0bbdb3e9f9553af5981
- SHA1 1458ea294654f402f909410bdff9f17d762d76f6
- SHA512 48f4d48840bdc8e0abafed856fba1b77a3e190975e475a40d74cc9dc6375f3a80d2d0e8f5cc161a60a1c856ffeb36be52409df3f92a359dbb4910a893bf645f9
- SSDEEP 3072:GY17cy/23udLzzcPOq7XgpOKkSB3oVJb8rm/YF3mbKUmPb:X1cRCcPOqbC1kesN/Ytv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.mkfjvtla/cache/payload.jar
- Size 300KB
- SHA256 084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686
- MD5 710a5677d720564f8e40b144fac89588
- SHA1 1f1508653c60068c2fbaeebf6ef73aca57a3eec9
- SHA512 2e8546001aca1fa218e53b11d2693cd3e87221f4e5e969e35441fbbfb9180e5a3247c7d4b6cef2c24c3b4fbac8629d04dd6cca4c7eef1da3738f8dc41d68c32c
- SSDEEP 6144:OhqL6htm5KggoMy+TFrrfoHD0b4yRlwpctNVMVR1jw:vRsrrwE4dctNVMVrM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.mkfjvtla/cache/payload.jar
- Size 300KB
- SHA256 084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686
- MD5 710a5677d720564f8e40b144fac89588
- SHA1 1f1508653c60068c2fbaeebf6ef73aca57a3eec9
- SHA512 2e8546001aca1fa218e53b11d2693cd3e87221f4e5e969e35441fbbfb9180e5a3247c7d4b6cef2c24c3b4fbac8629d04dd6cca4c7eef1da3738f8dc41d68c32c
- SSDEEP 6144:OhqL6htm5KggoMy+TFrrfoHD0b4yRlwpctNVMVR1jw:vRsrrwE4dctNVMVrM
- MD5 SHA1 SHA512 SSDEEP