Overview
overview
7Static
static
6b0cd184080...18.apk
android-9-x86
7MiGameCent...ce.apk
android-9-x86
7csgamedata.apk
android-9-x86
csgamedata.apk
android-10-x64
csgamedata.apk
android-11-x64
data.apk
android-9-x86
data.apk
android-10-x64
data.apk
android-11-x64
mm_datau18.apk
android-9-x86
mm_datau18.apk
android-10-x64
mm_datau18.apk
android-11-x64
play.apk
android-9-x86
play.apk
android-10-x64
play.apk
android-11-x64
unicom_resource.apk
android-9-x86
1unicom_resource.apk
android-10-x64
1unicom_resource.apk
android-11-x64
1woshop.apk
android-9-x86
woshop.apk
android-10-x64
woshop.apk
android-11-x64
Analysis
- max time kernel
8s - max time network
162s - platform
android_x86 - resource
android-x86-arm-20240611.1-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system - submitted
16/06/2024, 00:01
Static task
static1
Behavioral task
behavioral1
Sample
b0cd1840802fa70a7e25de9e080c0b8d_JaffaCakes118.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
MiGameCenterSDKService.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral3
Sample
csgamedata.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral4
Sample
csgamedata.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral5
Sample
csgamedata.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral6
Sample
data.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral7
Sample
data.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral8
Sample
data.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral9
Sample
mm_datau18.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral10
Sample
mm_datau18.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral11
Sample
mm_datau18.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral12
Sample
play.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral13
Sample
play.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral14
Sample
play.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral15
Sample
unicom_resource.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral16
Sample
unicom_resource.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral17
Sample
unicom_resource.apk
Resource
android-x64-arm64-20240611.1-en
Behavioral task
behavioral18
Sample
woshop.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral19
Sample
woshop.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral20
Sample
woshop.apk
Resource
android-x64-arm64-20240611.1-en
General
- Target MiGameCenterSDKService.apk
- Size 4.9MB
- Sample240616-aazvyazhpd
- SHA256 aebea7a704c7db584125ae0adf24e5f15894611b23de86b5e3b8a525fa0fc69d
- MD5 fd4834f5cc303a8b5e990661d4538930
- SHA1 d2bb9ab928202418cf0beab99e1e3ba0fedfceb8
- SHA512 4318b270ed1df32d495f5c5a0c0b7fdf23f245f389657f08f716499e03c4906b355fc49109e374651e576d3d7720f7d0803c3237ff42c147b744afaa072b81ec
- SSDEEP 98304:qgOtUcjbeJDTndD3zzo0aBNzKKKKmSnmhLdPgqhwxrPRxISTJYZ:VQ3XGTdrXG9KKKKohLdPZwx5fTGZ
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.xiaomi.gamecenter.sdk.service - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.xiaomi.gamecenter.sdk.service - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.xiaomi.gamecenter.sdk.service - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xiaomi.gamecenter.sdk.service - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.xiaomi.gamecenter.sdk.service
Processes
-
com.xiaomi.gamecenter.sdk.service1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4305
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal
- Size 512B
- SHA256 8fd53fc0f82bedd8a05bdab07a69e059d48d48fa45009299bf97d59b068dc123
- MD5 c6af82dc6c32a2ebe1e7d8ca25da3c4b
- SHA1 c5a46d9a31696f9150d8b021bb425bb467ddc452
- SHA512 1c5fbdf58957e6cf7fdc45d49f99f4594206cf29bc208b46cffd6f588a62f16e29b14c36b6dce92ad05679ba4696aa589e83564b01515d7fc58218299eb98c87
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-wal
- Size 32KB
- SHA256 662194d42f2551e74cdd1130394460ae4afb9ebe977a33b6c96f169b5d540a54
- MD5 20a0891e64f77b136bfebaa09327e573
- SHA1 22598021bb4f0fb5aecf506ddfd5a80c693080ea
- SHA512 98911ff610d832d08c9afb386813a40d8694ee6ca514a8cc92820f95e6e0c5da2cedd2bd48b635417f1ae04da5f2767c212a89dca76710f6521483596abfb341
- SSDEEP 12:KWi0TzdTRmBEyPbP/wicOK2wUKeXRVOwClwZVDSDayNTSFbyoftMXsWllcV/fRm2:K6zyGSP/wogUZRRz05XsSlHGSP/w
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal
- Size 512B
- SHA256 4bfa0e05d92ab4e3be737d8eb8041c4d930571b729317cad256a92e08ee16bbd
- MD5 11e07f13446ac064df72932cc9c81ad1
- SHA1 4f258df54af2bb12c1559a22d0fc415b94c8656d
- SHA512 5f8bdff791b19f94aebe18e6aa81ab69fdf8eb7436d14c95b92ea680b2096ea3ad5e76b341a08926f00f2d24948cfe9ffdc92f0d16a43765b84f278a4538dd17
- MD5 SHA1 SHA512
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-wal
- Size 68KB
- SHA256 66c7cb5fe1c5cab4d904dab0c9f94696abe706c2a3c8f2e28e5bfe26ee591283
- MD5 1b36c261d6e62bd90595f90225ff129d
- SHA1 8eb0edc39c386daf456e5945164df43bbccb4002
- SHA512 60f3035d35dc61b500627062f8f52e2ab86176bd23198e47cef14118f607ca5021b63d57316c1741877263ea14be28a715c22c18da5bc8a832b7ffaf59cedb10
- SSDEEP 48:SqzNSP/wfTljC2dc6TuUsjp7vaV7H3ru47aCK7WGSP/ncYl8POf:D0PmlhG6SUSaV7KtSPkY8Q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg
- Size 48B
- SHA256 ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
- MD5 340611b379e362128c71623c5e8da1b4
- SHA1 0673cee3ec93948c5474f182f9bc0bf0dbc0076e
- SHA512 7f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 339B
- SHA256 e26f2d724893bcc0b51ed152bdfa4e74f8c41c3166adddef6f69323fbf82d9dc
- MD5 b18fef219ff00272c2aeaa19f9e6ba16
- SHA1 5a0246a28b8e7a7219e874ac730ff87dec7528de
- SHA512 a2ca70bca6dc63232330e3e80c6842c30b50bbfa5bd5c072a6643c6ea65a45a07494db6cf0fd790b12dd51a69112ba85e4877a1e665e70cf67fdca1261e74ba6
- MD5 SHA1 SHA512
- Path /storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt
- Size 508B
- SHA256 1e8fcb95e6f4c9eeb3433db4faabcf1f6de1f398519d5c6ed004fb7a1b718c52
- MD5 fd29cba86d0dde964a59c9b05293771f
- SHA1 ea8e1154892432706f0a51df2f336b8a9ddec905
- SHA512 7040125b0960c0cf9637c5499809f1c15bafed119da54968db666caf232134f4c401a596fc62b507b913c3941aa1722654ee9df18ab0a90e5c4089e4a0052dc9
- MD5 SHA1 SHA512