supercardx | aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8

Analysis

max time kernel
7s
max time network
150s
platform
android-10_x64
resource
android-x64-20260104-en
resource tags

arch:x64arch:x86image:android-x64-20260104-enlocale:en-usos:android-10-x64system
submitted
29/01/2026, 15:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8.apk
Size 5.1MB
Sample260129-sv1bbae12b
SHA256 aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8
MD5 137912c1e82266cbddcbda627ec1f072
SHA1 4363ab407be106ac9e07208810dfb39e3012ff33
SHA512 2efb0e820285e2fccf5e7c7ddf2f621d4a3d4f0feb319f98270bd136086518b0192437922b90973d88b61b812c8983ea21a58774c33ac106cb2f0952859a8f37
SSDEEP 98304:+PoibdzpUGjeJ+/iT4PVK/klEgxztucq2av/x/ii6M8U3bmlImVv2gM3Cdt3Zhfu:+7bZpRVisjllx4Ggp/9cDVvM3Stbu
TLSH
T1AE36024DB74DB92FC87F15734D96C2B222568D1B8E82D20B6844375CE877AE80F59BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

supercardx impact infostealer rat trojan

Malware Config

Signatures

SuperCardX
SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.
trojan infostealer rat supercardx
Supercardx family
supercardx

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	io.dxpay.remotenfc.supercard1

io.dxpay.remotenfc.supercard1
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5104

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/io.dxpay.remotenfc.supercard1/files/profileInstalled
Size 24B
SHA256 3c40b80ad38de3eedc4ae1d36e1dcf36e1871589ab6051274de120c9fad331bc
MD5 41db0d68ca8a2113eb4af56aab73a5e3
SHA1 b6908d109bc8f38a8824ec944318ae9d3e99a123
SHA512 fd44f760c12d93dafe2217b21b922badde56e053fe35e9ea1a7c63beb625a2d33f457d9b5c1e069da85b72da83e32728aea5b6b3c68336def4a1325dc83ea9ca
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/io.dxpay.remotenfc.supercard1/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 6ec31c82b9fb7185ffcc445f559974865d6352e5d632cb519aea2148f916145d
MD5 7b6ea5b93d9b3b70624c9f4a340e0c56
SHA1 2e96645dc46d8682d091fefd0ae5ebf3613b5dc2
SHA512 95b99ba3b1f21e84a0e8477e3f3d74d44620df1e517e1a47023d184ca5a7ea4098ef3e16c2e2f4045b6a7e2e9badcf5d702b5f9b52caaf897a09519b455dcfaa
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/io.dxpay.remotenfc.supercard1/primary.prof
Size 2KB
SHA256 2c8b11d27fd5ece3d529fabb4eb1f7a71cf563bf49124a432c03407eb4aa56bc
MD5 3f90b38fd8fc4329f3273eb071551c1c
SHA1 85e89592388674e56c2ad61dc0157dc4c03a8523
SHA512 6978b0b6f5ea05f0991ce2f2e10b0169ed5d5fdf1a94083e5ed9a796329293a2970695f79e7d312024e42f5c8692c1608a1ada9e4e0522416b984f29600e3e85
TLSH
T15D514AFAC4D62B468130454B12C5FAFE66B106CCA5CDF952A05E87F9304FC606CB49E2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads