Analysis
- max time kernel
2766002s - max time network
191s - platform
android_x64 - resource
android-x64-20220621-en - submitted
27/06/2022, 11:06
Static task
static1
Behavioral task
behavioral1
Sample
36cd2ea94bcf9f9a9959dc4c1c489933.apk
Resource
android-x86-arm-20220621-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
36cd2ea94bcf9f9a9959dc4c1c489933.apk
Resource
android-x64-20220621-en
0 signatures
0 seconds
Behavioral task
behavioral3
Sample
36cd2ea94bcf9f9a9959dc4c1c489933.apk
Resource
android-x64-arm64-20220621-en
0 signatures
0 seconds
General
- Target 36cd2ea94bcf9f9a9959dc4c1c489933.apk
- Size 1.8MB
- Sample220627-m7pgpaaffj
- SHA256 51f9c37c3eec0b6f8325aa1c8fe64a0615ab920584042df557426473b1270b40
- MD5 36cd2ea94bcf9f9a9959dc4c1c489933
- SHA1 828c76b5d980c893147bdee72eb3832227aff7f2
- SHA512 d829d6969f53a3b1b929cf6b964af454f4087bb9075afccf0303007409188bac21df06a1cab5bd2615360fae40202fd3dbb1a861ce397a8d09e8ce86bbc102c4
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- BlackRock
BlackRock is an android banker based on Xerxes banking Trojan.
- BlackRock Payload 4 IoCs
resource yara_rule behavioral2/memory/5788-0.dex family_blackrock behavioral2/memory/5788-1.dex family_blackrock behavioral2/memory/6185-0.dex family_blackrock behavioral2/memory/6185-1.dex family_blackrock - Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json 5788 ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json 5788 ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json 6185 ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb:cproc /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json 6185 ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb:cproc - Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb:cproc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
- Size 455KB
- SHA256 bf812b9febc89fe729fada34d625919021c858fcb0aa29cc2d7e2b72b4a8656b
- MD5 52458d72b03f9774a9a1ff30e1750c51
- SHA1 0d544f3cee770eba7d7febaf38c4081c08fc1ffc
- SHA512 1e5325eae4aa35b59116360a40a3ecd5f87187275bf5e6673a5e8088ab064c662255cc43fe0c451808b9faa19e9a3cfe6279b624278486aea94049763f91375c
- SSDEEP 12288:dklmeKjdQhPPJoIvJtIHopiyFQT3DkcBhoByU/guaeAY:dkc29z4opQVBhq5aS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
- Size 455KB
- SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
- MD5 af68c2b989210302d650a740daf14a87
- SHA1 e80815b10aa0caf260abac6bee1f33d4ae3d063a
- SHA512 773f689ebd4f8c571e845ae737ea0be28467f7a5f9c67dc6a50ad26176e685023868d0524864edd92ac39f63711d0d21cfd0a1f5d6eb918fa2f531213711a6a9
- SSDEEP 6144:vKlPhp47/g1Pmp0bfTdaIEpwrVgTvgo38Z9+6lTgp9CljjKn:vkA56daVt38n+DClc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
- Size 455KB
- SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
- MD5 af68c2b989210302d650a740daf14a87
- SHA1 e80815b10aa0caf260abac6bee1f33d4ae3d063a
- SHA512 773f689ebd4f8c571e845ae737ea0be28467f7a5f9c67dc6a50ad26176e685023868d0524864edd92ac39f63711d0d21cfd0a1f5d6eb918fa2f531213711a6a9
- SSDEEP 6144:vKlPhp47/g1Pmp0bfTdaIEpwrVgTvgo38Z9+6lTgp9CljjKn:vkA56daVt38n+DClc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
- Size 455KB
- SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
- MD5 af68c2b989210302d650a740daf14a87
- SHA1 e80815b10aa0caf260abac6bee1f33d4ae3d063a
- SHA512 773f689ebd4f8c571e845ae737ea0be28467f7a5f9c67dc6a50ad26176e685023868d0524864edd92ac39f63711d0d21cfd0a1f5d6eb918fa2f531213711a6a9
- SSDEEP 6144:vKlPhp47/g1Pmp0bfTdaIEpwrVgTvgo38Z9+6lTgp9CljjKn:vkA56daVt38n+DClc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
- Size 455KB
- SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
- MD5 af68c2b989210302d650a740daf14a87
- SHA1 e80815b10aa0caf260abac6bee1f33d4ae3d063a
- SHA512 773f689ebd4f8c571e845ae737ea0be28467f7a5f9c67dc6a50ad26176e685023868d0524864edd92ac39f63711d0d21cfd0a1f5d6eb918fa2f531213711a6a9
- SSDEEP 6144:vKlPhp47/g1Pmp0bfTdaIEpwrVgTvgo38Z9+6lTgp9CljjKn:vkA56daVt38n+DClc
- MD5 SHA1 SHA512 SSDEEP