Analysis
- max time kernel
605868s - max time network
167s - platform
android_x64 - resource
android-x64-arm64-20220310-en - submitted
02/06/2022, 11:07
General
- Target 36cd2ea94bcf9f9a9959dc4c1c489933.apk
- Size 1.8MB
- Sample220602-m8b8rafdd5
- SHA256 51f9c37c3eec0b6f8325aa1c8fe64a0615ab920584042df557426473b1270b40
Score
10/10
Malware Config
Signatures
- BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
- BlackRock Payload 4 IoCs
- Makes use of the framework's Accessibility service. 3 IoCs
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
- Acquires the wake lock. 1 IoCs
- Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
- Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
-
ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb:cproc1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
DP.json
DP.json
DP.json
DP.json
DP.json