Analysis
- max time kernel
123s - max time network
132s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
19/05/2024, 09:17
Static task
static1
Behavioral task
behavioral1
Sample
59a7a9cb6b7592ffb21e4e2cffb9b2aa_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
MiGameCenterSDKService.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral3
Sample
MiGameCenterSDKService.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral4
Sample
MiGameCenterSDKService.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral5
Sample
unicom_resource.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral6
Sample
unicom_resource.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral7
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240514-en
General
- Target MiGameCenterSDKService.apk
- Size 5.2MB
- Sample240519-k85tysbf6z
- SHA256 25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
- MD5 f32ab0ab2ed58691ba1f4fbd46be3506
- SHA1 89b2abe5a52714b55e7a6b5245f786f7be6d23f9
- SHA512 a75e0a12d1c216fc528577d1ef52d81e597e259f114ca8fb2af8fb9329cad1c86636408bb55b9bb5bb08583df96615f54590c142a8a736f9a089e322aa890e46
- SSDEEP 98304:ayrBRZZz1VGiDp05BrS0FTS40PY7lzYga7qYcsnsnEX/n1PI3:H1LZJ/pmBrBS45lU7qBssnEP+
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xiaomi.gamecenter.sdk.service - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xiaomi.gamecenter.sdk.service - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xiaomi.gamecenter.sdk.service - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xiaomi.gamecenter.sdk.service - Reads information about phone network operator. 1 TTPs
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xiaomi.gamecenter.sdk.service
Processes
-
com.xiaomi.gamecenter.sdk.service1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4321
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
- Size 512B
- SHA256 6710160cf662df82e8287c458aa81f745362b9498bde7e03f0833f2d57fd416a
- MD5 1eb1ff55e149b6a17f1a8f1e5cec3256
- SHA1 5f1e1a7ad97238a848226873533728f5e7cfbf6a
- SHA512 ba10cf202b13cc465a4eb111a5655bd6da69011c4e3548efb99fcb353d5010f12545ec3381db45336066a0741ab78c38526bbda4a73920a954d1f96e886eb4af
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-wal
- Size 32KB
- SHA256 f2a250e0001a26b1323ad897b7cbf4de4d0df724e744cd072bd67ea72c4f8e8a
- MD5 26ace50881bf8ff68005e92a0a930897
- SHA1 c69365985a904eb926836460c6f722afdaccf982
- SHA512 b54f5cbde43bafebae284082946b0c8b6c6856cc12659b8565160123e680374668e81f8fe10aa3800aa727ba34a83171ecaa7f196e37ba74ae7c7ca71199344b
- SSDEEP 24:Kgv44QqzyGSP/gsAVHQu805XsSlHGSP/gTwLP:tv44lzNSP/gsKwb0ZYSP/gTkP
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
- Size 512B
- SHA256 2903fa9c3d1936085202f5bda4915cbd0874f3a72775e19b1f267dafeceeda5f
- MD5 b38bad907e2e33706c4ad1f6b4577d30
- SHA1 cd2668eec0006017933b3d230d55716c876959af
- SHA512 450e2e58b1c6e3905de9b51cfa1723f1a6157b8213302a0c096954524ea5a87cf6a32060a19aaefdc0cb642fdfac41b91c76c1cddf2cbd49923954e8cb208ebf
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-wal
- Size 28KB
- SHA256 d71f2d75149796aba05f461763969ec56b02b27fcffde85ee773128c522c9fb9
- MD5 a4f5b7b5b60519074e091dbd205ba8ab
- SHA1 52d05d386cce0daa5a42b88ed11e8cc4fe17a6d4
- SHA512 a7c01f72b052a81729421a0e6738251292fe3cfaf155d98e9307b48cab67386d8449b929d4be351d549eef39e921e4cabea3e2d62d923af59fe438219f6acebd
- SSDEEP 12:KIP7wuyqzdTRmBEyPbP/PvcELzWOwClSdgE25bv3Ogy8Ur1vzdRmBEyPbP/pcP+:KeZXzyGSP/MEMbgW91qGSP/i
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
- Size 512B
- SHA256 af06724cabc779936b237a6b6f8f3a9fcc88e6d8bb77f884ddcc9c9247891a11
- MD5 a302b09fb7c313c678b820063c64482b
- SHA1 a00846153de129d23ebed151f8d0550d98dc3dfe
- SHA512 95c0a964d7dcc2a7f9f889f1a707af31e250eae991fe6d9a91ccf559fc020b3e4dd35d98dac50bf3c90ab4a58a223649a5e635f42ee12fd9f75bca27c4facadf
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-wal
- Size 68KB
- SHA256 3b0a6fb124cb65093505ced0d529726c0e980c697faf58e3b145221bda98eadf
- MD5 ebb253943993d818d6b9ea53695092ed
- SHA1 69a2abb8496ea79465a5953d6b726f4770a1ed33
- SHA512 309fdb945b5e9e62ac43985a31c2630a4e8493eaa6125da39dca299ee84190bb60a4e065e472a71c71af368290c7fc6b713c7c436a73b05fb4ebe403083d4d91
- SSDEEP 48:NQnzNSP/CHjjC2dc6TuUsjp7vaV7H3ru47aCK7WGSP/ikt:uz0PWhG6SUSaV7KtSPX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg
- Size 48B
- SHA256 ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
- MD5 340611b379e362128c71623c5e8da1b4
- SHA1 0673cee3ec93948c5474f182f9bc0bf0dbc0076e
- SHA512 7f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 339B
- SHA256 80eb20448b370426a87c6177d7f09691b1cca00c0e114bf435a9133bbd91d452
- MD5 1d8997bcef3be50ea7abc7adaf2d7eb1
- SHA1 8e7e637e64e6d1d3c50e6a15118812b01bac48b1
- SHA512 cce11ff8af86375e83f7c340d13453265a5c1a26f4927d6545e5582c28457eb9b0c602f01897cf4a08ff4d3dc23608eea4052063072e3dcf8c6866d09c03ceee
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 272B
- SHA256 9f783d892f31736dec32e0e8bf2ac16f1e7b9d8e3be4ed452d014f0f3f2e848e
- MD5 5e5a93586e639e55036aed3e150284aa
- SHA1 01b7a7f043c19653a4835b4388b990e61ef76c28
- SHA512 0c428515daf7776bc0bda8e97d73b5f32353982ee5dd47cc755fcf921b66e3f6f47a3e0f407f31a8ab32645d825c487cc748ccb030ec00bd41e9a087973eb5c4
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 236B
- SHA256 7ce1bbc408347c9b3045b27d4862cab37a9de2c4f0daf83874fc62a54fac29bb
- MD5 05d9252bce2c46091ac612ef4d2d76df
- SHA1 70a12e5a0bb452dca6e3b505bcd23eecb2da6408
- SHA512 c10fe4099ddd59dfe302cf11b301d6377981c3a810019c88e2a791895c820aaa8ec23c661975d0266819d085b03f8c5644d01740e9d8c7af2de3e94239dc85dc
- MD5 SHA1 SHA512