Analysis
- max time kernel
47s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
02/11/2026, 01:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Campus_guardian_AI.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Campus_guardian_AI.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Campus_guardian_AI.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target Campus_guardian_AI.apk
- Size 4.1MB
- Sample261102-b8qwcset5t
- SHA256 48d20913ac2e6e5a79066c03a18f37e681fa4591da7712ba65dce652961926a5
- MD5 75ed1bb2a43ff1396a2b3adbe7bdf1b1
- SHA1 0e296cbf6ea739af08b0bc2211ca7eb112e61afc
- SHA512 a54e5bf5350917087efadb8e60d04e6ae9b8a2a281aff80cad9bf98e984e3176149664e4f8f49e6732f8897e979d0ef7ac676a3c63af730a853549cef2f8c5a5
- SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCKHhdmrn:eZjJk75T15b6tUk6z8RdCwi
- TLSH T149161242E3E56C6FCC7782361FFB972916818E52CA92D3038A68721C2DB7AC44F55BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.campusguardianai.app - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.campusguardianai.app - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.campusguardianai.app - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.campusguardianai.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.campusguardianai.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.campusguardianai.app/files/profileInstalled
- Size 24B
- SHA256 1304b6cebd584e6b41338e615a6ee07afc6280dc7478c96a74ed7e4ea83a3212
- MD5 1f94872b36cc43f165f11ebeeea93d69
- SHA1 1dfd43efa5035c967635be3ef6fe810294ac55b2
- SHA512 0a0b7d18c825612627c263b67725e7975e4df5ba35aade2e015f602a02fa7cde156f44dd52301894826b52f6f1c83e1c907be47b52c17593c2b5a03192d1b24e
- MD5 SHA1 SHA512