Analysis

  • max time kernel
    9s
  • max time network
    180s
  • platform
    android_x64
  • resource
    android-x64-20240603-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
  • submitted
    11/06/2024, 03:38

General

  • Target
    MiGameCenterSDKService.apk
  • Size 5.2MB
  • Sample240611-d7bfdssgke
  • SHA256 25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.xiaomi.gamecenter.sdk.service
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5215

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        report2.db

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db
        • Size 16KB
        • SHA256 59f8fabfb23252ca1bfaa126ae9d337192e6c105a60ede20fe5f567782899628
        • MD5 SHA1 SHA512 SSDEEP

        report2.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 512B
        • SHA256 15b9c9cbb5df2b2bfd02af009354d14cfe5040b7be4281fa6f93b5669425d38d
        • MD5 SHA1 SHA512

        report2.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 8KB
        • SHA256 ef70c0284d3455a9a4e46eedaf4efcacc1dfeee5cdbd2d105406f3dd00d0ec18
        • MD5 SHA1 SHA512 SSDEEP

        report2.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 8KB
        • SHA256 88de13252d9854ed5ad59fec22d1aee622d0c89e786bb8b2aefaf2b380b8ce0d
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db
        • Size 56KB
        • SHA256 76454b2ff99e875447542a27745fe67f7fd1bbddffdbfb459ac18546ab58b4b5
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 8KB
        • SHA256 78daa3fcf57c520c7755716066080e186bd56895f4ebdd7de3f05e2969c9c82f
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 512B
        • SHA256 753b7536bc1b61a34c04ef7926ceeb213c79527f00135cc3729e2468972b2c81
        • MD5 SHA1 SHA512

        accounts.db-journal

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 8KB
        • SHA256 293aa9fc5b691aaf0931855c5aaaf48473bec56e116fd390e666160bc76c4b0d
        • MD5 SHA1 SHA512 SSDEEP

        xiaomi.cfg

        • Path /data/data/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg
        • Size 48B
        • SHA256 ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
        • MD5 SHA1 SHA512