Overview

overview

10

Static

static

10

Центр...2e.apk

android-11-x64

7

Resubmissions

20/07/2026, 14:35

260720-ryapdsft4s10

20/07/2026, 13:31

260720-qsva6sby4l10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Центральный Банк.5b2e.apk
  • Size 3.9MB
  • Sample260720-ryapdsft4s
  • SHA256 6338e66c753a115679db77fd18d8b7ab8820361db7433348d17c7656ea4f4544
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerspywarengate

Malware Config

Signatures

  • Family: NGate

    NGate is an Android malware that utilizes NFC traffic relaying to steal victims' cash.

    trojaninfostealerspywarengate
  • NGate payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Центральный Банк.5b2e.apk
    .apk 3.9MB

Центральный Банк.5b2e.apk

  • SHA256 6338e66c753a115679db77fd18d8b7ab8820361db7433348d17c7656ea4f4544
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • NGate payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
b305ed7ba47e9f7a8ae32eb18f57897c18860bce4a9317ea18318baa2d1289dd
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=John Bideb,OU=WhiteHouse,O=Country,L=Moscow,ST=Russia,C=RU
de.nfc_problems.top.once

Android Permissions

Центральный Банк.5b2e.apk

Permissions

android.permission.NFC

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

de.tu_darmstadt.seemoo.nfcgate.top_up.1DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION