Analysis

  • user interaction
    yes
  • max time kernel
    77s
  • max time network
    90s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    24/10/2026, 15:03

General

  • Target
    StarLock-2.2.12.apk
  • Size 467.7MB
  • Sample261024-sffclavwcs
  • SHA256 70d9068001e450f15d64762936d94a79f17c580a63959afc65b177ab628dfbae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.starware.app
    1⤵
    • Makes use of the framework's foreground persistence service
    • Schedules tasks to execute at a specified time
    PID:4885

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 51B
        • SHA256 19927269f880bb3432320d1b3f8b631c4ed36c79c3074c87e884ad6fe0828f00
        • MD5 SHA1 SHA512 TLSH

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 192B
        • SHA256 b08281610960e37c4ed57f1660f78768f1f426b1c5249b0d868fc75c02a647af
        • MD5 SHA1 SHA512 TLSH

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 192B
        • SHA256 16545dcdd72c8d3a03093adecfcef8bdd460612467c5e88a54209e3076bb5d1a
        • MD5 SHA1 SHA512 TLSH

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 456B
        • SHA256 13d07c10c7a1653b6131ae470413a53bba020646530a27e60ccc7623a01943a3
        • MD5 SHA1 SHA512 TLSH

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 456B
        • SHA256 8bce7426de325bf22671ea260c21c7b33ed5ab7a3442d5bd53ac20559ba07758
        • MD5 SHA1 SHA512 TLSH

        starware.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware.preferences_pb.tmp
        • Size 24B
        • SHA256 b3813eb76b3be2f158d6c0cbf237e19792b04b3e209731ca8db2e3e5211acb3d
        • MD5 SHA1 SHA512

        starware_achievements.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_achievements.preferences_pb.tmp
        • Size 320B
        • SHA256 f4eef67d3ddfed0463e6b9ec8e60b599fd052f9557e8bbfd5c8166103ea7b3c9
        • MD5 SHA1 SHA512 TLSH

        starware_achievements.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_achievements.preferences_pb.tmp
        • Size 645B
        • SHA256 04365b2af1eb73947c7471cda57cabca3db4571a76ef003b7eb58ab5272e618a
        • MD5 SHA1 SHA512 TLSH

        starware_achievements.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_achievements.preferences_pb.tmp
        • Size 755B
        • SHA256 5dc216f672dcd9272b06cc9c96e0000c1c3b6ca9f0283760e2c0d2f4633ac568
        • MD5 SHA1 SHA512 TLSH

        starware_achievements.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_achievements.preferences_pb.tmp
        • Size 864B
        • SHA256 ab2ed6f0ce01ab1ca7f90f5afbd2d0b3999dcffdc6b2e4b1c3a230d0a43c52ab
        • MD5 SHA1 SHA512 TLSH

        starware_achievements.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_achievements.preferences_pb.tmp
        • Size 863B
        • SHA256 77e2f6f66c0fa69c4aa5d1711770227253af7799d9693d4e095a55b87956a2f4
        • MD5 SHA1 SHA512 TLSH

        starware_backup_meta.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_backup_meta.preferences_pb.tmp
        • Size 65B
        • SHA256 9a8fec2908824a2745dae17693f5643dcb288df354083394ff03eb6a16beda56
        • MD5 SHA1 SHA512 TLSH

        starware_launcher_icon_assignments.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_launcher_icon_assignments.preferences_pb.tmp
        • Size 548B
        • SHA256 5cd193fefeafe95d4046e09cbb54d023047a688651af9bcd07c1b2edad31261f
        • MD5 SHA1 SHA512 TLSH

        starware_launcher_layout.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_launcher_layout.preferences_pb.tmp
        • Size 89B
        • SHA256 8f15f49073d278ec6f528900633903969b1fdd324fd638116b4317b5fe3fcbe5
        • MD5 SHA1 SHA512 TLSH

        starware_launcher_layout.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_launcher_layout.preferences_pb.tmp
        • Size 183B
        • SHA256 3f41e5f741d04f4e502e1b4eedad57e558638466e1fe1350c1435d330eb9a8ac
        • MD5 SHA1 SHA512 TLSH

        starware_missions.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_missions.preferences_pb.tmp
        • Size 652B
        • SHA256 dfa71c8e3d1d4a6be1fbb54a2a3b88694cdb0b7da4246d0ee859e84c9e7298d7
        • MD5 SHA1 SHA512 TLSH

        starware_star_rush.preferences_pb.tmp

        • Path /data/data/com.starware.app/files/datastore/starware_star_rush.preferences_pb.tmp
        • Size 436B
        • SHA256 2cbfdcc6de0ea260cfe9b42d648b8629f98b9f9569d9d6e4bb723abca2a8c896
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.starware.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 75b21de4c0d5a0b737c61fb07b8b1666e547ab4a65bc3da6834bf1afc40ae4d8
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 e346c768aeb80b73968dc212a49d227f2926f492344b07d11f57be017aae0bd5
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 5082fc2365aee9604412e0a44e71bab09656e98fde4a2f13e72a4bfe9cd27abc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 1f820ccbbf5d7325ef3bf817fe3ebd736ed609fedda50a8e3b3f66798a8b2a59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.starware.app/no_backup/androidx.work.workdb-wal
        • Size 309KB
        • SHA256 2739ff55eab8f3e6cd5e892469b3518da690a14b8906d6568a86133d43e421f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.starware.app/primary.prof
        • Size 11KB
        • SHA256 e1b3ec41b08bfa886230c53c0fbf8126407bf1b3464ea87f733957b84fdd13f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.starware.app/primary.prof
        • Size 23KB
        • SHA256 ffaf300d66e109175ddcf4f453d84080dadbd4400454c3e345de123cdb283188
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1793462940-StarLock-progress-20261024-170900.json (deleted)

        • Path /storage/emulated/0/Download/StarLock/.pending-1793462940-StarLock-progress-20261024-170900.json (deleted)
        • Size 7KB
        • SHA256 08d5bb5766dd3f72c664a2ee3ce75e88afb40fa40e9d644c9e389d2d20b3eed0
        • MD5 SHA1 SHA512 SSDEEP TLSH