Driver-Copilot-0.4.3-arm64.apk
- SHA256 416d5d763a458a060bccbb6b239342b1e2fc23776d2ecf06c4ea8990eae8d524
-
SuperCardX payload
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Behavioral task
behavioral1
Sample
Driver-Copilot-0.4.3-arm64.apk
Resource
android-33-x64-arm64-20260708-en
SuperCardX is an Android malware using NFC relay to steal payment card data first seen in April 2025.
| resource | yara_rule |
|---|---|
| sample | family_supercardx |
| description | ioc |
|---|---|
| Required by accessibility services to bind with the system. Allows apps to access accessibility features. | android.permission.BIND_ACCESSIBILITY_SERVICE |
| description | ioc |
|---|---|
| Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. | android.permission.SYSTEM_ALERT_WINDOW |
| Allows an app to post notifications. | android.permission.POST_NOTIFICATIONS |
| Allows an app to access approximate location. | android.permission.ACCESS_COARSE_LOCATION |
| Allows an app to access precise location. | android.permission.ACCESS_FINE_LOCATION |
Codesigned file was signed by an untrusted entity.
| resource |
|---|
| Driver-Copilot-0.4.3-arm64.apk |
SuperCardX payload
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
android.permission.INTERNET
android.permission.SYSTEM_ALERT_WINDOW
android.permission.FOREGROUND_SERVICE
android.permission.FOREGROUND_SERVICE_SPECIAL_USE
android.permission.POST_NOTIFICATIONS
android.permission.VIBRATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.FOREGROUND_SERVICE_LOCATION
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
android.permission.ACCESS_NETWORK_STATE
com.ridewise.app.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION