golddigger | CORETAX[.]apk | Triage

Sharing

Reason

error processing APK: could not decode AXML: unknown chunk type: 512

General

Target

CORETAX.apk
Size

17.2MB
MD5

d6bebd374ee891fcbf81e10eaa7ac9e3
SHA1

e430990a7e3d6c78bbee07ac761732accd50d3a5
SHA256

cd265fdd6e67fc10aa0de3e2622762bbb5333bc1d782d57b4cf79434b2764abb
SHA512

d95504a19d44078f68b85419d2391bdadfd37b3b47a843322e68fd98f8ef7d71a10c74b2bef78bbc3dbdddf106b7e29c05e84aa50d2e80903c2f6eea555646ce
SSDEEP

393216:MaXSgglBYklxXh2Lkm31G0shaEaCHijOx/3Ggdb:MsSgABXcLB3VkPZnB

Score

10^/10

golddigger

Malware Config

Signatures

GoldDigger payload 2 IoCs

resource	yara_rule
sample	family_golddigger
sample	family_golddigger

Golddigger family
golddigger
Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Files

CORETAX.apk
.apk android arch:arm64 arch:arm