Analysis
- max time kernel
60s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/09/2026, 22:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mreader.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
mreader.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
mreader.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target mreader.apk
- Size 1.9MB
- Sample260905-16feaazzdw
- SHA256 356c9c0cdfcd59d4f1cd25da0cfeb6815a40b575175c374cd4a083a53e583797
- MD5 adf4c3e6c05ba4217036875a544f6e20
- SHA1 434a1decdfb7b86f3ec69391ecc60e685a61cbea
- SHA512 284d473c4d7d4d8482488d7621d5c815075d3eaf04c1cb38b198d1cc52427e7824372a06309a65942e1d07b551e28c00d4ee00f913ef6914a1cf755ba5aaddec
- SSDEEP 49152:IXus/eTchXzvobIFUH1HV8RLeEDGOnx8qTp:IXvOchd+aLeESOx8y
- TLSH T19E953303D752229DCF7686791C9A561203DB6D9BC2A3864FBC8C2B1C5A6B3D42F723C5
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.martin.mreader - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.martin.mreader - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.martin.mreader - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.martin.mreader - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.martin.mreader
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.martin.mreader/files/profileInstalled
- Size 24B
- SHA256 8ef4212997ff21073d4822f0629b5bbe54fb9363c61114b8a3c7079c15781132
- MD5 23c70c626136dcc1e80cc5195e863c8b
- SHA1 f61baff8608550442192fe0002fff89778d5d357
- SHA512 489ec942b4ad902411f06986bbca463736a29ea9deebb70304a3de63bbe2197af94c9a94e4c81acf2113405f41c218f3fd218f4505812017cf3c5cf0259e9b57
- MD5 SHA1 SHA512
- Path /data/data/com.martin.mreader/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0b7922ced2fb10086da86dd8e1fc2df1d26a143b4445b23ae52d1b78fcec4e6b
- MD5 ebf6cd4b192b1203b1bc284ca87f9d80
- SHA1 46a6333723b86011cb227a521334f55405368a7c
- SHA512 248f599582263921234d0a98d03e607b8f6f715f4d27470f019002148cadd468da436d3c9fc1c7b2d4b009caa75241a70ba943f5838f1cfda8e71b2fb75f6e1f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.martin.mreader/primary.prof
- Size 574B
- SHA256 af7fec7c2081c340072ef1e4c07b350e04ab3115392292e761071457d02d9366
- MD5 cae26405ad43798e2bd4929a14485b31
- SHA1 de4b0558afe47d0582bdf49b00bd88ae1aa5b581
- SHA512 e9abc68bcd8dc13d4402bee34fc5503580c6a24abce3bf320177aed8b8be75b916f111d2122328eacfb588102134e79ed44bb0deb99cbc5198583db40006d59c
- TLSH T180F047973B5A308615285A46692506050283CE14B6B6CBC42F8D610B0C306FAACFCBF0
- MD5 SHA1 SHA512 TLSH