hxxp://gofile[.]io/d/UjXxSHmw

Analysis

user interaction
yes
max time kernel
139s
max time network
866s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
03/10/2026, 02:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://gofile.io/d/UjXxSHmw
Sample261003-c513laybpg

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
39	api.gofile.io
59	api.gofile.io

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 8 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4343

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Size 25KB
SHA256 f8dd9e051d595e9e8917b97e7af9588730f6e69b049fe1928c4d6d90469f973e
MD5 66adbf6b7f44c16996d975fb1cef9992
SHA1 02eecf8c74e05e167cc1d773e4ad1e1210c6070e
SHA512 e0d4b6bdcce457a1108ecf807b79cb6e7b395cb3c3cd5a73a048626f278a4e9bfae6b201759e0817ddc9e5dd5b9faf18b8fca92e6b6336189ea27630e63e47f8
SSDEEP 768:645mDMrDLRPmjuexLRPmb1P7JZqriL7TPqril7iTxqri77DidCqriG7Ayqriu78Z:6EHMxfiMm+rkNBTwY
TLSH
T134C2B651A1A4193F196743C4B795FA38862DE282D36E881CB47E03B52F83E59FC672DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof.dJmfkL.tmp

Path /data/misc/profiles/cur/0/com.android.chrome/primary.prof.dJmfkL.tmp
Size 17KB
SHA256 c60bc5c02ec306fc72d95ceadae89531263cc6f50cd0f12e3bc0dd9036004b59
MD5 fd72da51cf9447a9817198ad31e56964
SHA1 d437d29a8fefab4fc998441465331eedddfba781
SHA512 babac15ef4d0771a63bed28fc7ac0100686fd7a6f52778dab889319e12bed0d47fee2102a962ac0c2144fade52dd6c8511c1026019c1c52b10dd0de10270ae69
SSDEEP 384:/dcqCpGwAtiwgmsvuz7mc7k1g5N9FKKCq/hEeIP/2:/djxwA5m1g5xK65Qm
TLSH
T11882D0DD9699C62DDD1A2D7FC200C88796037EF12243CA48BA0F5ADC2A4EED5F5C7804
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.com.google.Chrome.FY9NeP

Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.FY9NeP
Size 11KB
SHA256 0db4050bc8c79434ba4ecd71e22d2c7a306af599fa757b104e11ddd1cfabd935
MD5 eac94f2be3f5c4f4745493e023a7aee3
SHA1 671bd8a624619e92f49ef6a00fcf74d0dadc16c4
SHA512 34c56479ff8f6f82b9f7a03ecb16b1c800409c38b00d85291c916e917f3cfbdec5b2b87b8a7dea3e5cb942b12746b599b19a17c13fe2d999224c283ee0d5aa0e
SSDEEP 192:uZ5hfJahoHncKqGngGjFFaRynGDmJEDHmbrx5ZWylyb9dGaP:W5hf8aqGngGjFwpmJvbrvsysGw
TLSH
T17532AF6D9C717E2AD5AC2B4148E9CEE38FD20472C63860B994D6C6505D8853D77E32C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1791600157-StarLock-2.2.6.apk

Path /storage/emulated/0/Download/.pending-1791600157-StarLock-2.2.6.apk
Size 30.6MB
SHA256 e6afba34dd9fa4f722d76aed3c3bf849391d1b66c22f95731007b87e182c46e4
MD5 ea8aea8dacb22249724ee2bb524a0d3a
SHA1 4c65581d6381d10ca70a3e6a9431c7d28f52f0ae
SHA512 9f93e7cef1974c629a94e8db837313aa0383ef293611272341d4807b59af17ee5eabe26baf036441eec834e795a51013a4b44f6d59f883c801d0be44f4108a19
SSDEEP 786432:itSFfD3jM+1Qs/e5XCONWiiGPsnZ38hpA6HYP2:qKTMJNWiiGPsnyhpbYP2
TLSH
T1EA67338F6378B17EF5061D383EEB35A0E101B85D2935C5DEDA78EB906A23E520F1B158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1791600157-StarLock-2.2.6.apk

Path /storage/emulated/0/Download/.pending-1791600157-StarLock-2.2.6.apk
Size 449.8MB
SHA256 9cdcb9df5e59ae591221065bedf24013311233dcd0d1e089bbe3c0186f6fd4a9
MD5 e5d66405cbb257d18216bbbab6ac6d3e
SHA1 032e7ac3403b9eb9b69dc9bcf867626f6016e607
SHA512 cb3f3c24d8f56f28f671ec2ba3910fb8103cfeeaf73cbb2581c08bc09edda6f0437c26f198bf87f3fc3377569cf106f21472bf6313f17edefa5290a760ff3234
SSDEEP 12582912:rbDCm5+NZ/1NlVkTYH2JKLuoIf03uWvtluAPOpyJyYA:rHH8NF1HVkTYHm1fk3tyRl
TLSH
T1BF29338BD6E4ABF9F427567A254B2564D090BC0A272093C8D8F0F69D217FF940F62F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1791600157-StarLock-2.2.6.apk (deleted)

Path /storage/emulated/0/Download/.pending-1791600157-StarLock-2.2.6.apk (deleted)
Size 523KB
SHA256 128813df74a54f7336eca7f8378481aa7b1557ae779df1a0778b05eb0c2ed662
MD5 be86e34f51aba1fb5162a605a2a443d9
SHA1 71a0ffcf4964f9d99bd7c3828a0a9df03902118f
SHA512 a134c27da648112e349056d13b7a7cb38e09c0a03b02b476c03739b5b61b71b88a7be0173a1b6f8aee4d6f7a3592a9c666fcb1ccb668dba1be387b77d6d8a830
SSDEEP 192:uZ5hfJahoHncKqGngGjFFaRynGDmJEDHmbrx5ZWylyb9dGa:W5hf8aqGngGjFwpmJvbrvsysG
TLSH
T1D6B4AF2D9C717E2AD5AC2B7148E9CEE38FD20472C63860B894D6C6505D8853DB7E32C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads