Analysis

  • max time kernel
    2766002s
  • max time network
    191s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    27/06/2022, 11:06

General

  • Target
    36cd2ea94bcf9f9a9959dc4c1c489933.apk
  • Size 1.8MB
  • Sample220627-m7pgpaaffj
  • SHA256 51f9c37c3eec0b6f8325aa1c8fe64a0615ab920584042df557426473b1270b40
  • MD5 SHA1 SHA512

Malware Config

Signatures

  • BlackRock

    BlackRock is an android banker based on Xerxes banking Trojan.

  • BlackRock Payload 4 IoCs
  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb
    1⤵
    • Loads dropped Dex/Jar
    PID:5788
  • ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb:cproc
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6185

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        DP.json

        • Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
        • Size 455KB
        • SHA256 bf812b9febc89fe729fada34d625919021c858fcb0aa29cc2d7e2b72b4a8656b
        • MD5 SHA1 SHA512 SSDEEP

        DP.json

        • Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
        • Size 455KB
        • SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
        • MD5 SHA1 SHA512 SSDEEP

        DP.json

        • Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
        • Size 455KB
        • SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
        • MD5 SHA1 SHA512 SSDEEP

        DP.json

        • Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
        • Size 455KB
        • SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
        • MD5 SHA1 SHA512 SSDEEP

        DP.json

        • Path /data/user/0/ayxzygxgagiqhdnjnfduerzbeh.hme.egybgkeziplb/app_DynamicOptDex/DP.json
        • Size 455KB
        • SHA256 733d4a43d7090b72c1a2e1e2f46eda78de9326e77fff5562443ed1c193cd58e3
        • MD5 SHA1 SHA512 SSDEEP