hxxps://gofile[.]io/d/7gxJcd62

Resubmissions

25/09/2026, 07:07

260925-hxt7zabg541

25/09/2026, 07:05

25/09/2026, 07:04

25/09/2026, 07:03

25/09/2026, 07:02

25/09/2026, 07:00

25/09/2026, 06:37

25/09/2026, 06:30

Analysis

max time kernel
244s
max time network
250s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
25/09/2026, 06:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gofile.io/d/7gxJcd62
Sample260925-g9lwpasamd

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
32	api.gofile.io
28	api.gofile.io
29	api.gofile.io

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:3162

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 25KB
SHA256 ce500e1111e75e25926464624781abc28b6c2bcfb5ce0ed846e384a943af95d5
MD5 a76d5d1c42eca054ba9218f03f230c0e
SHA1 d2f0ad32e0deef9c6fa2038489407d5bdda4add6
SHA512 e29c08d7298f93c2954b13337cec3391cfe425f98fe070c414d2b6fb0259383cd90ba3fa8db904bca2e018248aa2691c189de57a56747862462faed58e6a5fe5
SSDEEP 768:j45mDMJDLRPmcW7FexLRPmb1P7JZqriL7TPqril7iTxqri77DidCqriG7Ayqriub:j/HMxfiMm+rbNBTwY
TLSH
T199C2C851A1A4183F595743C4B795FA38862DE282C36E881CB47E03B52F83E69FC676DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.bKRvJN.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.bKRvJN.tmp
Size 15KB
SHA256 1d6d9de5a864886daf9bbbe959f9c23d33eca35ca6b22926e007dd81a0d1c153
MD5 bbdd33fa83c328569164119d8d468257
SHA1 6f3206a95bf0151b769d702257773b27555d507e
SHA512 132accc813da1a05c1edbfb5716b3518851b608903aa891673b56dfa92d77ae7ecc61beb580decd8d8ecfc75e44b669b83f1ee8a11b5c1f0a3f26377947d0121
SSDEEP 384:0bpaHY+uKdpfoKG5iFqAX+JpVXibUufGSgzaoxH:0MHVLdpwn5iEAX6pVXiw8GBuW
TLSH
T1A762D074AB1D8C2D075D4EC07F3B27AA19419E0B41937CA8B0E131A6B28ACD12F1FBD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads