Overview

overview

10

Static

static

10

aa264d6f85...b8.apk

android-9-x86

10

aa264d6f85...b8.apk

android-10-x64

10

aa264d6f85...b8.apk

android-11-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8.apk
  • Size 5.1MB
  • Sample260129-sv1bbae12b
  • SHA256 aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
supercardx

Malware Config

Extracted

Family

  • supercardx

C2

  • https://super-card.rcchh.com/

Signatures

  • SuperCardX payload 1 IoCs
  • Supercardx family
    supercardx
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8.apk
    .apk 5.1MB

aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8.apk

  • SHA256 aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • SuperCardX payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
18498fb733f9c4ec18117f32c336b7b145896931df2660e8d74c9a4e99971167
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=android,OU=android,O=android,L=android,ST=android,C=Us
io.dxpay.remotenfc.supercard1

Android Permissions

aa264d6f85a121013d96bf0fe81239c328ae49c5965f49a91ca9049b968b2db8.apk

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.NFC

android.permission.CHANGE_NFC_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

io.dxpay.remotenfc.supercard1_io.dxpay.remotenfc.supercard.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION