Analysis

  • max time kernel
    122s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240603-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
  • submitted
    11/06/2024, 03:38

General

  • Target
    MiGameCenterSDKService.apk
  • Size 5.2MB
  • Sample240611-d7bfdssgke
  • SHA256 25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.xiaomi.gamecenter.sdk.service
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4475

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        mistat.db

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/mistat.db
        • Size 20KB
        • SHA256 d67fc13e1ed71b8f91e3d40dc3df2c3f5dd89920778a1b9d74b611696f315d99
        • MD5 SHA1 SHA512 SSDEEP

        mistat.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
        • Size 512B
        • SHA256 7c5c7ce44e4c827cf76ca660af6db74c7bd30193358ad47552d0828a98af7672
        • MD5 SHA1 SHA512

        mistat.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
        • Size 8KB
        • SHA256 2418299347a4f204126cc4c4d319716d952de202b9d613f7b5d2a61ae8a630d0
        • MD5 SHA1 SHA512 SSDEEP

        mistat.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
        • Size 8KB
        • SHA256 58e538d5b719ec6bfdb0b8ec8fa203cef62ebb80b615d35fa5887758e80363db
        • MD5 SHA1 SHA512 SSDEEP

        report2.db

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/report2.db
        • Size 16KB
        • SHA256 554ee22f7dac402863003b53cd5cab48c7857b1fc1e8897674ac1b4f8f6d9bf7
        • MD5 SHA1 SHA512 SSDEEP

        report2.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 512B
        • SHA256 f164773758b96b0a35e34282cfc41a32486302caf380a5c03734257c89a72df1
        • MD5 SHA1 SHA512

        report2.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 8KB
        • SHA256 4062b74adbad61cb525a6311b0ef07d6c3e805025df1d944202a48c924106f98
        • MD5 SHA1 SHA512 SSDEEP

        report2.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal
        • Size 8KB
        • SHA256 48f8cb4034531370b35f7d66679ece2c88927dcc5a3ac4750d65d203125cc1f0
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db
        • Size 56KB
        • SHA256 c72c1935c5aea58c0cc8cef80f33b1a0d4d2e8d9c6b72607a442419e87c106f2
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 8KB
        • SHA256 2257129e570f07b1c699e7713fbc73969254b617ba3a3ab260fc091e38315d13
        • MD5 SHA1 SHA512 SSDEEP

        accounts.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 512B
        • SHA256 da979c47363c41dcb78676e46bca2a9d5d6a586ca01eef99c258bb266e2d0bc3
        • MD5 SHA1 SHA512

        accounts.db-journal

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
        • Size 8KB
        • SHA256 aa765ca80fbee8a8e3e109dd5d1aab1cf51cc1ca750e25f1df51ffdfdc7930c7
        • MD5 SHA1 SHA512 SSDEEP

        xiaomi.cfg

        • Path /data/user/0/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg
        • Size 48B
        • SHA256 ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
        • MD5 SHA1 SHA512

        log1.txt

        • Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
        • Size 339B
        • SHA256 079da9a2151ce57ef9bc4f028dd9e54e0dc3d54b5750c84f6a5915a6f7ad3919
        • MD5 SHA1 SHA512

        log1.txt

        • Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
        • Size 272B
        • SHA256 52d3d53d7e9c6eb3191d7671a8d0c9beda6b06102cbbbf3ac1bb2df0f4dff8e7
        • MD5 SHA1 SHA512

        log1.txt

        • Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
        • Size 236B
        • SHA256 dca2169de823719a608b22d8e5bd7a0095e4a6f1b2a649cb488f5616b66f3e2e
        • MD5 SHA1 SHA512