Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
154s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
-
submitted
07/09/2024, 04:19 UTC
General
-
Target
MiGameCenterSDKService.apk
-
Size
5.2MB
-
MD5
f32ab0ab2ed58691ba1f4fbd46be3506
-
SHA1
89b2abe5a52714b55e7a6b5245f786f7be6d23f9
-
SHA256
25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
-
SHA512
a75e0a12d1c216fc528577d1ef52d81e597e259f114ca8fb2af8fb9329cad1c86636408bb55b9bb5bb08583df96615f54590c142a8a736f9a089e322aa890e46
-
SSDEEP
98304:ayrBRZZz1VGiDp05BrS0FTS40PY7lzYga7qYcsnsnEX/n1PI3:H1LZJ/pmBrBS45lU7qBssnEP+
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.xiaomi.gamecenter.sdk.service1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
Network
-
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN A -
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN A
-
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN AResponsessl.google-analytics.comIN A142.250.180.8
-
DNSssl.google-analytics.comRemote address:1.1.1.1:53Requestssl.google-analytics.comIN A
-
DNSregister.xmpush.xiaomi.comRemote address:1.1.1.1:53Requestregister.xmpush.xiaomi.comIN A
-
DNSregister.xmpush.xiaomi.comRemote address:1.1.1.1:53Requestregister.xmpush.xiaomi.comIN A
-
DNSandroid.apis.google.comRemote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.200.46
-
DNSregister.xmpush.xiaomi.comRemote address:1.1.1.1:53Requestregister.xmpush.xiaomi.comIN AResponseregister.xmpush.xiaomi.comIN CNAMEcname-app-com-amsproxy.w.mi-dun.comcname-app-com-amsproxy.w.mi-dun.comIN A20.47.97.231
-
DNSregister.xmpush.xiaomi.comRemote address:1.1.1.1:53Requestregister.xmpush.xiaomi.comIN A
-
POSThttps://register.xmpush.xiaomi.com/pass/registerRemote address:20.47.97.231:443RequestPOST /pass/register HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; Pixel 2 Build/QSR1.210802.001)
Host: register.xmpush.xiaomi.com
Connection: Keep-Alive
Accept-Encoding: gzip
Content-Length: 201
ResponseHTTP/1.1 200
Date: Tue, 10 Sep 2024 10:20:54 GMT
Content-Type: application/json;charset=UTF-8
Content-Length: 142
Connection: keep-alive
Server: MonKing/3.14
Xiaomi-Security-Center: if any vulnerability found, go https://sec.xiaomi.com
-
142.250.179.238:443tls, https -
142.250.200.46:443android.apis.google.comtls
-
142.250.180.8:443ssl.google-analytics.comtls
-
20.47.97.231:443https://register.xmpush.xiaomi.com/pass/registertls, http
HTTP Request
POST https://register.xmpush.xiaomi.com/pass/registerHTTP Response
200 -
142.250.180.4:443tls, https
-
142.250.180.4:443www.google.comtls
-
216.58.201.98:443
-
172.217.169.46:443
-
224.0.0.251:5353 -
1.1.1.1:53ssl.google-analytics.comdns
DNS Request
ssl.google-analytics.com
DNS Request
ssl.google-analytics.com
-
1.1.1.1:53ssl.google-analytics.comdns
DNS Request
ssl.google-analytics.com
DNS Request
ssl.google-analytics.com
DNS Response
142.250.180.8
-
1.1.1.1:53register.xmpush.xiaomi.comdns
DNS Request
register.xmpush.xiaomi.com
DNS Request
register.xmpush.xiaomi.com
-
1.1.1.1:53android.apis.google.comdns
DNS Request
android.apis.google.com
DNS Response
142.250.200.46
-
1.1.1.1:53register.xmpush.xiaomi.comdns
DNS Request
register.xmpush.xiaomi.com
DNS Request
register.xmpush.xiaomi.com
DNS Response
20.47.97.231
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD573c3bd154bf35fad6b909e8da67443e3
SHA1841c18c19602d86874a59739ae408338bcd3050d
SHA2563a827ab548ed10797e28d4380d67236fce431e77dd4f4e4c6406480178afccd9
SHA512f22abd2a33e8684f3e8487b36e0e2a37f50760fd2a8291689e662a71b2e64c6b07993585b31a511b118dd66c043b4506abfb34abba19168eb911ed749f711036
-
Filesize
512B
MD5d4f732ec859c5f8003507cfee2fc39b5
SHA1022712b152763ab471a214dd42d5e84791b79931
SHA2566fae75e95308d0570acc3929b66bcbd41d8261980c06dedc56b21d2c6b8c9e3d
SHA512df1761969bdc80297ebdcf335973013704f481be2cdcb20f932954975d156e92c101d2a2d25d161dcf61f0c21f023e164b759555ffe2a468f4becffa943aa049
-
Filesize
8KB
MD5a763bf8aa3997f6d6f7e95cf8d8824d1
SHA17e6014fe1aa63eec7ff010aca0fa30f0e47ba3c6
SHA2560855fe0ca2f1b65f3795c59d7cc7afe39ecd23a55807d87f93744e56661a1f2a
SHA512d2d0f8b250fded5d6e5fa49b50260613d398a99c429a82ea6fa9b77490a85410e922c8003de51242eaa716e5a61815f1113dc3fe44465f6faeb910223ceb9a7d
-
Filesize
8KB
MD57edb968a902a493da9d1c9d033c73513
SHA10c257ab8bfe8317c6be1f93f58dd448e472e2e3e
SHA2561dec489353ad656ce7eaaa5b9aa2a3c8f080e776db19fd4dcd4876233aa9aec7
SHA512f912e418d02fee849411bc618933fe49b0ce93fbe7a601c508a3ca2d3b06ce49beb23302f8d5f78a30590dc5a513f5c6bc7ad05c5cf7d12207eb8056cbfc156b
-
Filesize
16KB
MD58b98fcfb48ddf707159c829ddbdc3c5b
SHA1eaefb36a0e09a623e75ded3b959dc9afd1065e47
SHA25659f8fabfb23252ca1bfaa126ae9d337192e6c105a60ede20fe5f567782899628
SHA5127fb2801d83961e0d0fad96da6fa3b1c8713945544778e1235b68afd60697c7d3940f6542cf7556a56c41f8dd5e40a90c3cd9102914092e64b581d0b15c890b0f
-
Filesize
512B
MD5fae25091e1124367f3f40f270531cc16
SHA1a1bd86bf82b7cd0c9221bae473277dfce5f909c4
SHA25681335188cb2961b5bef27a13de3da07721e5dfe4c4e00bd198cdbd5262594304
SHA5128f1d15e9297ec6f91f214a119979966be73df8c36a32e246d08b4f04301388f2c73927eaed1c401ebb38da5461cc8eecd54e636c446a10f6d773218ff0936f02
-
Filesize
8KB
MD5254aad1d069e2cfdad9ef339e160d77c
SHA118cf0fbfa2556b712e6aea027e938296b721f915
SHA256dd6868e496b6c29bb45274663ba49e636a73915e653e88b06eb3ae6494ef405f
SHA5122271d244196574d6a9378d3efff29f48cee607803464aa6e417fdff8d08b430f4d4e7a58da41e242b52f639b22a78ad69e18ce8a5af7f6d873a3bcdbc425e0b4
-
Filesize
8KB
MD5d50654288f3dd236c9b080a273b5ce09
SHA10950b5bfe971baa13ddd68acc06f26b813a87864
SHA256877a84e760addd9eeeb297cdb95fbbdf2bb7941cd1110c110c625f412d93d814
SHA51205a1325e5db242109866e7e47da1a16e3286477717feaeca94be236334b845f104a46e2fc7da733923b43b4fa1d1b9e0d770b2f6070069431da36a985313a8fe
-
Filesize
56KB
MD5cab9a10c6b1fdd948cfc52d06f75d961
SHA1f9aba63d5fdd0bbd49227824502e21b7870a1243
SHA25676454b2ff99e875447542a27745fe67f7fd1bbddffdbfb459ac18546ab58b4b5
SHA5120e7ab1496508179ce88ee45fe49d39672190fce5a785bbeed8e0031fff14c9e42a7ace9fd60bedecf1c2562a05e82e12a3814cdbf8fb5dd2f11a87ee42fbb8f5
-
Filesize
8KB
MD5f3e896eb85cb981a4769fb4d6ab1b389
SHA10debb4993a39d02e4d91e1cd1ea4688aca57ea57
SHA2563d9de539f474fb7117ebc73b6ed216c17f59692936e72def77ad18894447e145
SHA512acd9a8381a7b8d6a3a94795f621605b55ca2e62a269db9b0c16018086557250e80b59eab5d6b14b86283c3f5e4d3ea8f7e6d62ea5896533df50ecc4cb8dc2241
-
Filesize
512B
MD5292fde3055304e5d0d4f117e3d3e62de
SHA165aebb18d72eca09cc459d36bbfe8e3a198e8a76
SHA2569a547d990faaee56c28f22e4f3b43a72833ec3f8254d011d1fccc776e0b021b8
SHA512cb2681a2a207971defc96013600446059a8df68c8d3949ec85a07ab3163706afb7f43ab8f0ea3552ecbe41ca1f039fb3eb0937d6be2023dac8d9a6b196cf3f01
-
Filesize
8KB
MD5ef59812a217d0103697e178eb6541b7e
SHA1dd6e2b5890598966f93b52a1e5ad752145dfe621
SHA256aef2ae4899198f93552ed5cba424dec354915ba7050ee506af6bbe5d0954ad02
SHA51200920c6b03db038a42228d138d1ba622be17031523123283823acd9f804fc26d7ff73e7d2593356c368d1c78e4dd829ce1a5ffb5516d84632d449ce542b55db3
-
Filesize
48B
MD5340611b379e362128c71623c5e8da1b4
SHA10673cee3ec93948c5474f182f9bc0bf0dbc0076e
SHA256ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69
SHA5127f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555
-
Filesize
339B
MD5f68cfe6c9081452de59aee18fdda5bcf
SHA1e5daeb6073d66c859f176339c1977e57ebfe9f9c
SHA25683e8fff84d1af551f61d813e6e041677d8fecf11077b0c22854b8afb63e20aad
SHA5124bf08ca9591193115483a4d56e5c1b5442cce6cbc27189571e3a624863af55a401d860c9bd20084665a1de3c5ac386e0537b1c37308ac2a69abfb0e90dcc3898
-
Filesize
272B
MD58c3dcce869643998dff3b54edb7aab2d
SHA1684a21310114ae9c589c8d5a6d748cb5018b4c57
SHA2565151844e3c93ed482d94266b6ca9cbd30bb8b0847eec7eeee6d3fc7f34c4f33b
SHA5129cc523ffdec87dd85972333c6b7bf605877cb685790df007b1d720bcec7bb2c4fef2da5e2110e3189d80c56bc057bea5148af785573eb99d126a0fb647bb69ff
-
Filesize
236B
MD5f4a4da9421e5a62056184004525817b2
SHA13c1175799b7ebc4d9ba4979e737372f04769a7b4
SHA25658755f6862c769ba35b682c4e5069e05c7f7c708907026bab018571a0106e33d
SHA512b145ec29e41482a0a8d4b0c381a17e4c5015bc88433f21d896599ff4f486d9eac767fe3c6da69ed03c7b88fbe6766a244e78202efab06da47433f9930368b6ea