Overview

overview

10

Static

static

10

173192ec57...0b.apk

android-10-x64

7

173192ec57...0b.apk

android-9-x86

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b.apk
  • Size 2.5MB
  • Sample261028-rmf22a1w4n
  • SHA256 173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerratnfcshare

Malware Config

Signatures

  • Family: NFCShare

    NFCShare is an Android NFC-based trojan targeting banking users, first seen in January 2026.

    trojaninfostealerratnfcshare
  • Android NFCShare payload 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b.apk
    .apk 2.5MB

173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b.apk

  • SHA256 173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Android NFCShare payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
0eebf2972bf712764c22dd2038440b9fc62dcbbf0b2662ea3c12995042012550
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国
com.cartao.protegidonew

Android Permissions

173192ec576111adbc0c228f75244cf627513c95ca1709036e9850f0cdb7c90b.apk

Permissions

android.permission.NFC

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.VIBRATE

android.permission.SCHEDULE_EXACT_ALARM

com.cartao.protegidonew.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION