golddigger | 537a916d4f2d30c2b6b65dbff3b221e1[.]bin | Triage

Sharing

General

Target

537a916d4f2d30c2b6b65dbff3b221e1.bin
Size

13.1MB
MD5

3d0bf2f7fb30a35819b2f4ef75bef7b1
SHA1

c947cea9c4d1bcce25dc109f42d93b3f21e47584
SHA256

789fb60d66d473356dd5fed1ab326dc9c3078891f892b351396ba2ffadd213c1
SHA512

a31712fdb1e1b7cbee1bb70797de7917c8c7e2b7eb3f14db029c8131798ab6b9f70fc8840cec8cdd89cbbadf63d26499fe61ddf4c2f5dd0944be92525597eb29
SSDEEP

393216:TG8JxfOGre9URWbh996mwn4nh/oowdpUWhmxT:T3x/re92qdInY/8bhmV

Score

10^/10

golddigger

Malware Config

Signatures

GoldDigger payload 2 IoCs

resource	yara_rule
static1/unpack001/29c1097ce233b29e71ace3bcf6acbd9b28ccd0af4559f66aaa35ce6fd1ceb2e2.apk	family_golddigger
static1/unpack001/29c1097ce233b29e71ace3bcf6acbd9b28ccd0af4559f66aaa35ce6fd1ceb2e2.apk	family_golddigger

Golddigger family
golddigger
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Files

537a916d4f2d30c2b6b65dbff3b221e1.bin
.zip

Password: infected
29c1097ce233b29e71ace3bcf6acbd9b28ccd0af4559f66aaa35ce6fd1ceb2e2.apk
.apk android arch:arm64 arch:arm

Password: infected