General

  • Target
    coach-release.apk
  • Size 17.2MB
  • Sample260810-d55apadh34
  • SHA256 9375c1e2afd29acf0cdbe9316c546e9457be2e769e5ca97dc59000a5c79191cb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: SuperCardX

    SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.

  • SuperCardX payload 1 IoCs
  • Requests dangerous framework permissions 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • coach-release.apk
    .apk 17.2MB

coach-release.apk

  • SHA256 9375c1e2afd29acf0cdbe9316c546e9457be2e769e5ca97dc59000a5c79191cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • SuperCardX payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
aa06f169d2c3e67c9e642ce1229ca63b72bc252dd763826d79285d861740954a
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Luma Tennis,O=Luma,L=Unknown,ST=Unknown,C=CN
com.lumacoaching.coach

Android Permissions

coach-release.apk

Permissions

android.permission.INTERNET

android.permission.RECORD_AUDIO

android.permission.ACCESS_NETWORK_STATE

com.lumacoaching.coach.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION