Analysis

  • max time kernel
    3844197s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21/05/2022, 03:43

General

  • Target
    da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7.apk
  • Size 4.4MB
  • Sample220521-eabwbshag8
  • SHA256 da96daccff18c40dbed7ca1ff2b2922bd9a90bb1ac4b1a0df0f5babaa06fa1d7
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

  • BlackRock Payload 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.mkfjvtla
    1⤵
    • Loads dropped Dex/Jar
    PID:6028
  • com.mkfjvtla:cproc
    1⤵
    • Loads dropped Dex/Jar
    PID:6066

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        payload.jar

        • Path /data/user/0/com.mkfjvtla/cache/payload.jar
        • Size 138KB
        • SHA256 72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66
        • MD5 SHA1 SHA512 SSDEEP

        payload.jar

        • Path /data/user/0/com.mkfjvtla/cache/payload.jar
        • Size 138KB
        • SHA256 72f9423cf2474b42269a57f92ae5fdec23294899d88f08421496245f4f125d66
        • MD5 SHA1 SHA512 SSDEEP

        payload.jar

        • Path /data/user/0/com.mkfjvtla/cache/payload.jar
        • Size 300KB
        • SHA256 084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686
        • MD5 SHA1 SHA512 SSDEEP

        payload.jar

        • Path /data/user/0/com.mkfjvtla/cache/payload.jar
        • Size 300KB
        • SHA256 084c2ae46d6e3f6cc8081dc2a24dd358228b28b55b219fa935e3b02c7d4fe686
        • MD5 SHA1 SHA512 SSDEEP