Overview

overview

10

Static

static

10

Prova de v...ia.apk

android-11-x64

1

Resubmissions

22/05/2026, 17:35

260522-v53kjad12s10

07/03/2026, 13:43

260307-qz9dnsb12j10

28/10/2025, 22:22

251028-2al3macs4c10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Prova de vida previdência.apk
  • Size 3.6MB
  • Sample260522-v53kjad12s
  • SHA256 4ce1489337c773c1dd31f5e38707da9a43f94b72a297a989380897b1cb477659
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerspywarengate

Malware Config

Extracted

Family

  • ngate

C2

  • 0

Signatures

  • Family: NGate

    NGate is an Android malware that utilizes NFC traffic relaying to steal victims' cash.

    trojaninfostealerspywarengate
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Prova de vida previdência.apk
    .apk 3.6MB

Prova de vida previdência.apk

  • SHA256 4ce1489337c773c1dd31f5e38707da9a43f94b72a297a989380897b1cb477659
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm64arch:arm

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
55b467dfdeb7940feeae01b763de475d78b333ba3af6a73bc7e41f4206bcc0c5
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=revoltzz,OU=Dev,O=Company,L=City,ST=State,C=BR
de.deficient.supporters

Android Permissions

Prova de vida previdência.apk

Permissions

android.permission.NFC

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.WRITE_EXTERNAL_STORAGE

de.deficient.supporters.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION