General
- Target lobstor.apk
- Size 1.4MB
- Sample260629-pgcfjsey2m
- SHA256 6dd602166a11823229fbf9f01e14bdfe9691ed75c493f7d8fd0b2bb31aeefd6a
- MD5 ce8b23a2d1ea1c9e72a1219532c84bd1
- SHA1 07a8ec19681f917f4332f5185a331f5f4b2d0f33
- SHA512 189bc66737a2ea9fc703188945bb2a9082468ea4a3fa0d5cfb1d920e0c1ab8479005470c9a2b4b21c0075cf1f490c5f6605fa619b67840b05d0d3adbcfc8baff
- SSDEEP 24576:V/tTFb/o7CinL9kuPBod1PjlJgC7ItNJRYIrD92r/WwLsjaEzK7srXD4qsy:HUNLNGjvgC7CNJRYo8rFYjbO7srXd
- TLSH T18065CF47FB59E87EC4F382374A76063A55068C668743D7838959733C2DBB9C05E8AEC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
lobstor.apk
Resource
android-x86-arm-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
lobstor.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
lobstor.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target lobstor.apk
- Size 1.4MB
- SHA256 6dd602166a11823229fbf9f01e14bdfe9691ed75c493f7d8fd0b2bb31aeefd6a
- MD5 ce8b23a2d1ea1c9e72a1219532c84bd1
- SHA1 07a8ec19681f917f4332f5185a331f5f4b2d0f33
- SHA512 189bc66737a2ea9fc703188945bb2a9082468ea4a3fa0d5cfb1d920e0c1ab8479005470c9a2b4b21c0075cf1f490c5f6605fa619b67840b05d0d3adbcfc8baff
- SSDEEP 24576:V/tTFb/o7CinL9kuPBod1PjlJgC7ItNJRYIrD92r/WwLsjaEzK7srXD4qsy:HUNLNGjvgC7CNJRYo8rFYjbO7srXd
- TLSH T18065CF47FB59E87EC4F382374A76063A55068C668743D7838959733C2DBB9C05E8AEC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: SuperCardX
SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.
-
SuperCardX payload
-
Checks the application is allowed to request package installs through the package installer
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
-
Requests dangerous framework permissions