356c9c0cdfcd59d4f1cd25da0cfeb6815a40b575175c374cd4a083a53e583797

Analysis

max time kernel
17s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
05/09/2026, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mreader.apk
Size 1.9MB
Sample260905-16feaazzdw
SHA256 356c9c0cdfcd59d4f1cd25da0cfeb6815a40b575175c374cd4a083a53e583797
MD5 adf4c3e6c05ba4217036875a544f6e20
SHA1 434a1decdfb7b86f3ec69391ecc60e685a61cbea
SHA512 284d473c4d7d4d8482488d7621d5c815075d3eaf04c1cb38b198d1cc52427e7824372a06309a65942e1d07b551e28c00d4ee00f913ef6914a1cf755ba5aaddec
SSDEEP 49152:IXus/eTchXzvobIFUH1HV8RLeEDGOnx8qTp:IXvOchd+aLeESOx8y
TLSH
T19E953303D752229DCF7686791C9A561203DB6D9BC2A3864FBC8C2B1C5A6B3D42F723C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.martin.mreader

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.martin.mreader

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.martin.mreader

com.martin.mreader
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4801

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.martin.mreader/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 af0f36c9f2d5fce1fbd120c822e8409f8e3e90e8c1bed34c46397d29bef57c45
MD5 f06c5c2329f630f599a832d55ce18276
SHA1 e34b8d4797931756d14403cbeb092d727d99b3a1
SHA512 8e7c30e22302f1f0670cb407adeacc3dfb6fc134e80c3707a19e631f8ba4292b646886b39e9955cbc72b7d40c793d6e0c26a6fe6afcd7f2180b4e40944b23776
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.martin.mreader/primary.prof
Size 574B
SHA256 af7fec7c2081c340072ef1e4c07b350e04ab3115392292e761071457d02d9366
MD5 cae26405ad43798e2bd4929a14485b31
SHA1 de4b0558afe47d0582bdf49b00bd88ae1aa5b581
SHA512 e9abc68bcd8dc13d4402bee34fc5503580c6a24abce3bf320177aed8b8be75b916f111d2122328eacfb588102134e79ed44bb0deb99cbc5198583db40006d59c
TLSH
T180F047973B5A308615285A46692506050283CE14B6B6CBC42F8D610B0C306FAACFCBF0
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads