Overview

overview

10

Static

static

7

aef6feeb7f...2a.apk

android_x86

10

aef6feeb7f...2a.apk

android_x64

10

aef6feeb7f...2a.apk

android_x64

1

Analysis

  • max time kernel
    2766099s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    27/06/2022, 11:06

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    aef6feeb7fd1af99b5539e8d5a2b712a.apk
  • Size 1.9MB
  • Sample220627-m7mcbscee9
  • SHA256 6fa4baef8a811f429cee4b383d7a4776b7b363b62551c8d8e0f93bad33adefbd
  • MD5 SHA1 SHA512
Score
10/10
blackrockbankerinfostealerransomwaretrojan

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

    bankertrojaninfostealerblackrock
  • BlackRock Payload 4 IoCs
  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc
    1⤵
    • Loads dropped Dex/Jar
    PID:4902
  • cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc:cproc
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5097

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        FI.json
        • Path /data/user/0/cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc/app_DynamicOptDex/FI.json
        • Size 480KB
        • SHA256 3b2e473ace0c2e5bb6d76353406f5386178b1f9be9df3a41b2b19e3aafe62d3e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        FI.json
        • Path /data/user/0/cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc/app_DynamicOptDex/FI.json
        • Size 480KB
        • SHA256 279c60682bf5cb7fe98df8e3f8ec41fe2404c35fa9c910938c97d11c8e0494b9
        • MD5 SHA1 SHA512 SSDEEP
        Download

        FI.json
        • Path /data/user/0/cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc/app_DynamicOptDex/FI.json
        • Size 480KB
        • SHA256 279c60682bf5cb7fe98df8e3f8ec41fe2404c35fa9c910938c97d11c8e0494b9
        • MD5 SHA1 SHA512 SSDEEP
        Download

        FI.json
        • Path /data/user/0/cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc/app_DynamicOptDex/FI.json
        • Size 480KB
        • SHA256 279c60682bf5cb7fe98df8e3f8ec41fe2404c35fa9c910938c97d11c8e0494b9
        • MD5 SHA1 SHA512 SSDEEP
        Download

        FI.json
        • Path /data/user/0/cmbmpqod.bfrtuduawoyhr.mlmrncmjbdecuc/app_DynamicOptDex/FI.json
        • Size 480KB
        • SHA256 279c60682bf5cb7fe98df8e3f8ec41fe2404c35fa9c910938c97d11c8e0494b9
        • MD5 SHA1 SHA512 SSDEEP
        Download