48d20913ac2e6e5a79066c03a18f37e681fa4591da7712ba65dce652961926a5

Analysis

max time kernel
46s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/11/2026, 01:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Campus_guardian_AI.apk
Size 4.1MB
Sample261102-b8qwcset5t
SHA256 48d20913ac2e6e5a79066c03a18f37e681fa4591da7712ba65dce652961926a5
MD5 75ed1bb2a43ff1396a2b3adbe7bdf1b1
SHA1 0e296cbf6ea739af08b0bc2211ca7eb112e61afc
SHA512 a54e5bf5350917087efadb8e60d04e6ae9b8a2a281aff80cad9bf98e984e3176149664e4f8f49e6732f8897e979d0ef7ac676a3c63af730a853549cef2f8c5a5
SSDEEP 98304:eZjJkdluWT1Tdba/COnsXk6zibxVBjqIfCKHhdmrn:eZjJk75T15b6tUk6z8RdCwi
TLSH
T149161242E3E56C6FCC7782361FFB972916818E52CA92D3038A68721C2DB7AC44F55BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.campusguardianai.app

Checks the presence of a debugger
defense_evasion

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.campusguardianai.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.campusguardianai.app

com.campusguardianai.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4791

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads