Driver-Copilot-0.5.0.apk
- SHA256 f89c33643ec270b80d3cd95068966f1f51fd1ec38132fec87d868619ff785563
-
SuperCardX payload
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Behavioral task
behavioral1
Sample
Driver-Copilot-0.5.0.apk
Resource
android-x64-arm64-20260325-en
SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.
| resource | yara_rule |
|---|---|
| sample | family_supercardx |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an app to post notifications. | android.permission.POST_NOTIFICATIONS |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| Driver-Copilot-0.5.0.apk |
SuperCardX payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.POST_NOTIFICATIONS
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.ACCESS_NETWORK_STATE
com.ridewise.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION