Overview

overview

10

Static

static

6

bad130c229...90.apk

android-9-x86

10

bad130c229...90.apk

android-10-x64

8

bad130c229...90.apk

android-11-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bad130c229078f0770b1f958467700438fabe5f9a08f443b8c40ee2ddec96e90.bin

  • Size

    1.9MB

  • Sample

    240208-1286ssbg3w

  • MD5

    a028bf4b01db506f72b580866408e3ee

  • SHA1

    45bdcbbde5b7f78e572592e8f3ae7805890ef7e7

  • SHA256

    bad130c229078f0770b1f958467700438fabe5f9a08f443b8c40ee2ddec96e90

  • SHA512

    767b74acf154033e86896fe27d4ced3414859aaed14da6b6a6aabaa83a8eb7a9784a5e58a4c2cd6718b03881fd53a6c956cd706c7f506d14a03caf2318c6a57c

  • SSDEEP

    49152:yCTtPdNQnI/kwszd/TNangK7Ct8Y5rDwzeDJPH:XRCIvsBTNagMC2YhDwzeJPH

Score
10/10
blackrockandroidbankerinfostealerstealthtrojan

Malware Config

Targets

    • Target

      bad130c229078f0770b1f958467700438fabe5f9a08f443b8c40ee2ddec96e90.bin

    • Size

      1.9MB

    • MD5

      a028bf4b01db506f72b580866408e3ee

    • SHA1

      45bdcbbde5b7f78e572592e8f3ae7805890ef7e7

    • SHA256

      bad130c229078f0770b1f958467700438fabe5f9a08f443b8c40ee2ddec96e90

    • SHA512

      767b74acf154033e86896fe27d4ced3414859aaed14da6b6a6aabaa83a8eb7a9784a5e58a4c2cd6718b03881fd53a6c956cd706c7f506d14a03caf2318c6a57c

    • SSDEEP

      49152:yCTtPdNQnI/kwszd/TNangK7Ct8Y5rDwzeDJPH:XRCIvsBTNagMC2YhDwzeJPH

    Score
    10/10
    blackrockbankerinfostealerstealthtrojan

    • BlackRock

      BlackRock is an android banker based on Xerxes banking Trojan.

      bankertrojaninfostealerblackrock

    • BlackRock payload

    • Makes use of the framework's Accessibility service

      Retrieves information displayed on the phone screen using AccessibilityService.

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      banker

    • Removes its main activity from the application launcher

      stealthtrojan

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests enabling of the accessibility settings.

    • Acquires the wake lock

    behavioral1behavioral2behavioral3

MITRE ATT&CK Matrix

Tasks