Analysis
- max time kernel
122s - max time network
150s - platform
android_x86 - resource
android-x86-arm-20240603-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system - submitted
11/06/2024, 03:38
Static task
static1
Behavioral task
behavioral1
Sample
9cdf558aecc2eb867420051c1ad67846_JaffaCakes118.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral2
Sample
MiGameCenterSDKService.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral3
Sample
MiGameCenterSDKService.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral4
Sample
MiGameCenterSDKService.apk
Resource
android-x64-arm64-20240603-en
Behavioral task
behavioral5
Sample
unicom_resource.apk
Resource
android-x86-arm-20240603-en
Behavioral task
behavioral6
Sample
unicom_resource.apk
Resource
android-x64-20240603-en
Behavioral task
behavioral7
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240603-en
General
- Target MiGameCenterSDKService.apk
- Size 5.2MB
- Sample240611-d7bfdssgke
- SHA256 25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
- MD5 f32ab0ab2ed58691ba1f4fbd46be3506
- SHA1 89b2abe5a52714b55e7a6b5245f786f7be6d23f9
- SHA512 a75e0a12d1c216fc528577d1ef52d81e597e259f114ca8fb2af8fb9329cad1c86636408bb55b9bb5bb08583df96615f54590c142a8a736f9a089e322aa890e46
- SSDEEP 98304:ayrBRZZz1VGiDp05BrS0FTS40PY7lzYga7qYcsnsnEX/n1PI3:H1LZJ/pmBrBS45lU7qBssnEP+
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xiaomi.gamecenter.sdk.service - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xiaomi.gamecenter.sdk.service - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xiaomi.gamecenter.sdk.service - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xiaomi.gamecenter.sdk.service - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xiaomi.gamecenter.sdk.service
Processes
-
com.xiaomi.gamecenter.sdk.service1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4189
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
- Size 512B
- SHA256 c84734d615848b58748fdbab391df5ac6d35c3d6e194ad4b010e482c6a354ecd
- MD5 e5dacb5685a00bd23a6beb21b4c41dca
- SHA1 5b56ba134259c65c4a941699ecb27f31dfb74ee1
- SHA512 e37b375c81def39b84b5c6dbffab543ba40cc8e06e8104e739516bd3ac56dc9cd90c5735715da4d59abd0754e2c28b63fed1794ae976ea700abb26955a86ba0d
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-wal
- Size 32KB
- SHA256 416a46a67fceee07850fa5301618c868ae04af1df46a7d89745c3095f643908b
- MD5 823e5b2b9ed00514ec12d09dc8ae93fd
- SHA1 03357265fa9fef5ac21054a5249b71770ca05164
- SHA512 f5215079fa972c4625dd7f5a5f1b6d827483d79273ce57cc7cde7338c94fa35904950b96fde2256e02dff957b090258002d62832b4f39b2ffc52decaf245e444
- SSDEEP 24:KPqgDzyGSP/lduvVETX05XsSlHGSP/l2YV6YX:W9DzNSP/ldutK0ZYSP/l71
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
- Size 512B
- SHA256 347b6e411886b804a2b9562767a39287f5056bc0468ba6675c3ae6a957bd844e
- MD5 1714021947f4e95c9aa91f24a9f1d2de
- SHA1 6949aeb0ded980d6256b205abda89466a1ce1e95
- SHA512 c8dfecfb351294ce74b304eacef949cbfe3d65cbeea4e96195e9d6787aa3f54cd78b0a1d6da98e4be01176b27965262f4612e1f30102d67199103ea42eca30b5
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-wal
- Size 28KB
- SHA256 bbce4178a49a0f254984538ede352ed8109e4bedac990347e215093454cf3ae6
- MD5 b55cc01dad8168d281adcdb6058b9729
- SHA1 8a3868a55d0bdd97d1d2dc1f5373eedb1c0ea592
- SHA512 e1b7a8844f900fced727220979a7d750ec7ec46dfad6571256d93d5c19cb8305d844af3e0c72623c6f33daa9a49ff8d48ca52062d4bc6cbc0069323d796bc664
- SSDEEP 12:K0uz5OEXzdTRmBEyPbP/B4/P5EiOwClcmgE25bv3Ogy8Ur1vzdRmBEyPbP/BxCM7:KD8EXzyGSP/B4PLRmgW91qGSP/Bx1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
- Size 512B
- SHA256 005ffce4208126c7c5a6e5c668b721628a5fd006aaed996eb98ead650d6d3b0e
- MD5 61d0ebd8a468711a5f84d1253d9de545
- SHA1 d28ee82054464c9dc1a3800a1db36e371cd8ce38
- SHA512 0a4365600fca777b2d335187fdaae2312d0dc6575df026f16e48eee65909d2f2102a1c1b0777b525541c028b664d430d9ab3a8e44684d36e5aab44cf846578a6
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-wal
- Size 68KB
- SHA256 42f64ed01f3d59412189506078931155712a438f737b81cc975d51fbfc9692a0
- MD5 f43949a872dc291373898dedc0c4b89c
- SHA1 b45cc9ced0fe30c757fb1ff96b71e0edb933681e
- SHA512 dc554154e63aa4228d86a769f3baf0d8a36cc8357bb4936ad783eb9a138aff3bf46c512065b4fda1454202d276aad412d51283fee3e64a466f354b2913c98025
- SSDEEP 48:tJ3zNSP/ns1jC2dc6TuUsjp7vaV7H3ru47aCK7WGSP/VRM:b0PkhG6SUSaV7KtSPk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg
- Size 48B
- SHA256 ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
- MD5 340611b379e362128c71623c5e8da1b4
- SHA1 0673cee3ec93948c5474f182f9bc0bf0dbc0076e
- SHA512 7f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 339B
- SHA256 51cffd0e3c1a8756268fe71cf07a027700b2d91e3e07cf77e03d9d1c10608759
- MD5 ca80c382e38737f2a9808f0f1d0e6572
- SHA1 0e5c79604cb62dfb47f0b08cf2ba7f422e44579b
- SHA512 2f496332db991008e3aea76cfc93995ae0ad7fa063c60d5eeb5431d4b9a2bdceb0c857b27e7c1f48e32eed2280b06a2a5492b7810762063615b54167233a76ad
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 387B
- SHA256 7bc189a686d186895ccbd488bbc447514f8ff0c37db0333d17e79fe71aa6a660
- MD5 51423c7ea53fd8b347c1a1bf38b3ff16
- SHA1 7bddb0dcb7c26d7d54789799600bf30bded1dbc6
- SHA512 a0d09ab8dc9a68bd00e08b42bae2894436cb64b874a8f5e9a25bdf74d3af031463baeef9609add0d7c5bb90c15d1b0b29d122b908aaab3c30cc82e350ec4041e
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 121B
- SHA256 82227e4dde8c0fd0ac2d2cc69a70fce85f8bcab8f16297e785963dee0e81828d
- MD5 80d0e6fd59e82a7f781f3267679dae41
- SHA1 c72bf0af6345a7748a7b76b6585f0ef7d0f00e43
- SHA512 00e0b7895f0bac4b8ab82766544767a0203dac1d3d833088f3ad62a66f25df30a3460623c78c433691b323699d44381a9485c5d2f2c0127d5842da01b0a61070
- MD5 SHA1 SHA512