supercardx | 2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0

Analysis

max time kernel
7s
max time network
155s
platform
android-10_x64
resource
android-x64-20260104-en
resource tags

arch:x64arch:x86image:android-x64-20260104-enlocale:en-usos:android-10-x64system
submitted
29/01/2026, 15:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0.apk
Size 5.1MB
Sample260129-sv2jdae12f
SHA256 2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0
MD5 f949eadea1b78aa68c1a393019052bcb
SHA1 80e53f3fa70470f1cd659514315be6450b1edc58
SHA512 75efc7a91fee3f74cc5c35d8e66d8ed2b0858609ce6c8ee9fb1f034a17552d5e60401a714f6ffa5a56700b8b0cec8c0ffc9ffacd1f7112e872eee1aef93e3800
SSDEEP 98304:vN+q71y7oZU7t2oCsjzg2ug/v43zPois2dtU3bmKImVmMgMWCdOfFZTM/:vxurzjkOnO7PD+VmOWSOo/
TLSH
T17A36024DB74DBA2EC87F11734E56C2B222568C1B8E83D70B6844375CE877AD84F59AC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

supercardx impact infostealer rat trojan

Malware Config

Signatures

SuperCardX
SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.
trojan infostealer rat supercardx
Supercardx family
supercardx

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	io.dxpay.remotenfc.supercard11

io.dxpay.remotenfc.supercard11
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5047

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/io.dxpay.remotenfc.supercard11/files/profileInstalled
Size 24B
SHA256 39bb8df039d3757eb800e928cf98eaf80771c9099ef86e8996569956885209f4
MD5 077c641d00c47a02b7fdf7c61b188cd9
SHA1 3909d07ec8951a86e67fab92dc24e26d9c1f0d31
SHA512 5649b99e07c630523067b49b6b5644ca07544411b1b917bcc1cdee8defa773c62357a4fa91d8e5dda1336f60a5bb756423cbbc7532c598ad821f94b8f9405225
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/io.dxpay.remotenfc.supercard11/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 ab06c3f82efcd99402789cf204f72c5b14ad55495ef94e0c7ba2287fb3d1965c
MD5 389e7e7b1d4dac09386114dec0a0c242
SHA1 4aaa233778e68abfcea337954c26a5b9133c2bcf
SHA512 6c2e1b5cf559572880e2e0cc38b667bafa5fff2df2b6939d498dfaacce78e5246610c7cd3eb93464f98084ff2b1c5b69ed96bcbd89dbf989f20ec59cc0bad7d7
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/io.dxpay.remotenfc.supercard11/primary.prof
Size 2KB
SHA256 2c8b11d27fd5ece3d529fabb4eb1f7a71cf563bf49124a432c03407eb4aa56bc
MD5 3f90b38fd8fc4329f3273eb071551c1c
SHA1 85e89592388674e56c2ad61dc0157dc4c03a8523
SHA512 6978b0b6f5ea05f0991ce2f2e10b0169ed5d5fdf1a94083e5ed9a796329293a2970695f79e7d312024e42f5c8692c1608a1ada9e4e0522416b984f29600e3e85
TLSH
T15D514AFAC4D62B468130454B12C5FAFE66B106CCA5CDF952A05E87F9304FC606CB49E2
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads