Overview

overview

10

Static

static

10

3c81526bcb...e6.apk

android-9-x86

6

3c81526bcb...e6.apk

android-10-x64

7

3c81526bcb...e6.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
  • Size 2.8MB
  • Sample261107-gae9vsvw2k
  • SHA256 3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerratnfcshare

Malware Config

Extracted

Family

  • nfcshare

C2

  • ws://nfck.loseyourip.com:8001/

Signatures

  • Family: NFCShare

    NFCShare is an Android NFC-based trojan targeting banking users, first seen in January 2026.

    trojaninfostealerratnfcshare
  • Android NFCShare payload 2 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk
    .apk 2.8MB

3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk

  • SHA256 3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • Android NFCShare payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
286ab3fe97fafd6f9404fe8013abbe02c31d5cd58455946be484f2b6cefab947
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Luigi Ferrari,OU=715,O=SoftwareLab,L=Roma,ST=Roma,C=IT
com.modol.nap

Android Permissions

3c81526bcb801d7dcfaea7f379528471d745a36e3c1bdc41877b4bed34b5dce6.apk

Permissions

android.permission.NFC

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.VIBRATE

android.permission.SCHEDULE_EXACT_ALARM

com.modol.nap.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION