Resubmissions

07/03/2026, 13:39

260307-qx7gaset4w10

07/03/2026, 08:17

260307-j63fdaaz5y10

07/03/2026, 08:14

260307-j49rnsgz4m10

General

  • Target
    ЦБ-910429.apk
  • Size 1.5MB
  • Sample260307-j63fdaaz5y
  • SHA256 88f53f232b8198d7ca6a7e936df8bfc64bb3fc827382860490b7cb67bb485f5d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • NGate payload 1 IoCs
  • Ngate family
  • Declares services with permission to bind to the system 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • ЦБ-910429.apk
    .apk 1.5MB

ЦБ-910429.apk

  • SHA256 88f53f232b8198d7ca6a7e936df8bfc64bb3fc827382860490b7cb67bb485f5d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • NGate payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

Password
infected

File Signature issue

Digest
d86f0e9222b75bea2cdd4a5abbc5b85795b107b99ba378830e7036f411888ef2
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Eshe Nkosi,OU=HR,O=OmniSoft,L=Johannesburg,ST=Tasmania,C=ET,1.2.840.113549.1.9.1=#0c17457368655f4e6b6f7369404f6d6e69536f66742e636f6d
ru.perk.app

Android Permissions

ЦБ-910429.apk

Permissions

android.permission.NFC

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET