Overview

overview

10

Static

static

10

b17d030bee...26.apk

android-9-x86

1

b17d030bee...26.apk

android-10-x64

1

b17d030bee...26.apk

android-11-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26.apk
  • Size 13.2MB
  • Sample261102-19pr5azw6p
  • SHA256 b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerspywarengate

Malware Config

Signatures

  • Family: NGate

    NGate is an Android malware that utilizes NFC traffic relaying to steal victims' cash.

    trojaninfostealerspywarengate
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26.apk
    .apk 13.2MB

b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26.apk

  • SHA256 b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
8dfc2f3863bcd105c4e89869f98ab93c3950f072e4afb73af6a1e58b5daf3259
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android Debug,O=Android,C=US
com.ghostnfc.client.opop59405446

Android Permissions

b17d030bee752859158181d586644569e40dfe13b0fd470f124829b5fbeddc26.apk

Permissions

android.permission.NFC

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.POST_NOTIFICATIONS

com.ghostnfc.client.opop59405446.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION