Loading malware…
Golden Crypt is a crypting service referenced as a third-party component integrated into the custom builder used by the Android banking trojan Albiriox. The content describes it as a stealth and evasion mechanism rather than a standalone malware family. Albiriox’s operators advertise that their builder integrates Golden Crypt to package the malware in a “Fully Undetectable” form and to improve evasion of static detection. The associated reporting ties Golden Crypt to Albiriox’s malware-as-a-service ecosystem, which is offered by Russian-speaking threat actors and used in campaigns targeting Android devices. No independent infection vector, payload behavior, targeted industries, or indicators of compromise are provided for Golden Crypt itself beyond its role as a crypting service used to obfuscate and protect Albiriox during delivery and deployment.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
2 distinct techniques documented for this family, organized by ATT&CK tactic.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A crypting/packing service integrated into a custom builder to obfuscate and repackage Albiriox in an attempt to evade mobile security and antivirus detection (i.e., “FUD” builds).
Crypting/obfuscation service integrated into the Albiriox builder pipeline to evade static detection during early-stage deployment.
Third-party crypting service integrated into the Albiriox MaaS builder pipeline to improve stealth and evade static detection during deployment.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.