Overview

overview

10

Static

static

10

2c6b914f9e...a0.apk

android-9-x86

10

2c6b914f9e...a0.apk

android-10-x64

10

2c6b914f9e...a0.apk

android-11-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0.apk
  • Size 5.1MB
  • Sample260129-sv2jdae12f
  • SHA256 2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
supercardx

Malware Config

Extracted

Family

  • supercardx

C2

  • https://api.kingcardnfc.com/

Signatures

  • SuperCardX payload 1 IoCs
  • Supercardx family
    supercardx
  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0.apk
    .apk 5.1MB

2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0.apk

  • SHA256 2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0
  • MD5 SHA1 SHA512 SSDEEP TLSH
android

  • SuperCardX payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
61f909e22900a3d17a5b4a8c9e20dd93c730afed474f40d789b090faa3b3c202
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=android,OU=android,O=android,L=android,ST=android,C=US
io.dxpay.remotenfc.supercard11

Android Permissions

2c6b914f9e27482152f704d3baea6c8030da859c9f5807be4e615680f93563a0.apk

Permissions

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.NFC

android.permission.CHANGE_NFC_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.INTERNET

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.DOWNLOAD_WITHOUT_NOTIFICATION

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

io.dxpay.remotenfc.supercard.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.CAMERA