221d5653575b4021709cb8bfc81980eb386bd8b3abbc7758cbd0edcce2d47415

Analysis

max time kernel
123s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
03/10/2024, 23:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MiGameCenterSDKService.apk
Size

5.2MB
MD5

f32ab0ab2ed58691ba1f4fbd46be3506
SHA1

89b2abe5a52714b55e7a6b5245f786f7be6d23f9
SHA256

25ee37926cb10bf50f51ce817513059ade7ecbdf589142ab05e56ee2dcc94fd2
SHA512

a75e0a12d1c216fc528577d1ef52d81e597e259f114ca8fb2af8fb9329cad1c86636408bb55b9bb5bb08583df96615f54590c142a8a736f9a089e322aa890e46
SSDEEP

98304:ayrBRZZz1VGiDp05BrS0FTS40PY7lzYga7qYcsnsnEX/n1PI3:H1LZJ/pmBrBS45lU7qBssnEP+

Score

7^/10

banker discovery impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.xiaomi.gamecenter.sdk.service

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xiaomi.gamecenter.sdk.service

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.xiaomi.gamecenter.sdk.service

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.xiaomi.gamecenter.sdk.service

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xiaomi.gamecenter.sdk.service

com.xiaomi.gamecenter.sdk.service
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-journal

Filesize
512B

MD5
b3048989e1b79d98c293ab796ae7f1ec

SHA1
17846481d20c83ec2e2230453f3add1320b8a1c1

SHA256
46975827b7cfbfadcbd0a656caeb54dcbeaed784147d1cb57672f25fae5ed785

SHA512
e91da75352c63cc17cbadfbfeb37ca7fd0f499c075d1bf09c795ec07eec28a2d14beb00c609b60ed2254aaaaec413f23b521458b50b1b5e2d13a5dbb0f7af688

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/databases/mistat.db-wal

Filesize
32KB

MD5
b2dd35235800c1aabe2f1e03b420ce11

SHA1
790856406969f88f99f4593df6f762457f40202f

SHA256
dcfc1a0bd623f37372ea946fa790efb91ad6ba8ce8b833b97389caaa4805c753

SHA512
a112991aade47432710b66c93ce7efaa55c761b6b8a03208e1764a00c1de20a104c5f81860e65459fa47c8960fab7fdd3a0682c33c8186bcd8dd8d7af9d5e76c

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-journal

Filesize
512B

MD5
a982be3cc0d43039574dbef5f9b2bde4

SHA1
825523ccd4cf40e7859c5b077c08096ce91a9b34

SHA256
1c38f27d51a0b7d6960637bb8be643c16a21eaf0a22ae1ca1ef2bd27ced15869

SHA512
2144bd7de4d8e4cdc25875fe91c119bead480b7031f0856991ca053b7a96e1b5efa9fba4e6028c823a06f2eeeb259fc053687cc387568eed55989cbc2d51f0c5

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/databases/report2.db-wal

Filesize
28KB

MD5
f13832ada852c19c6d02ae909f019cde

SHA1
d7a693d4d90cd8cbaa7d312eaec7692b7a6e23cd

SHA256
75c2323bf800661db5b2019f0e1af8ad785fb7d5ac61d55a3a0453092a1d9b56

SHA512
d204af27fa0afe350ca47610c2e1a794527bf15190320426e6a53fb28d1c1af48712bfb91e4e870bbbb9a4005770f1415dd27c4813a7b26950b34ab539dc38a6

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-journal

Filesize
512B

MD5
46d307e8435961734487bac46f308c38

SHA1
1cbfd61c89a91604c62d4c09173242569f2e774d

SHA256
541cd2878e8e2233ff03dfc3372c7fb54f1b91a5de86dc587832c41c5f43d4ae

SHA512
c438cfe793fb03eb0e8aaa4edbd209d12ce73cd03656ce9206bc689e9d2e7628fd121bde7584cdb6df3f5439da116bbeddab5c324b3e38e4bdf5d15124178df7

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/files/users/0/accounts.db-wal

Filesize
68KB

MD5
ab67cc73043d2097296eb34e1e131518

SHA1
ee50318f3ec7306c7b46834cc4291d2ec2aa53d2

SHA256
13a466a532054e6c3e3af16140d53377c9aa5a4006a18c00aae8c88a811c9053

SHA512
7419d48ec16a492063b5d51df5b92185406fecfc4c44f05c29716b9aac51e1a9a7bf9e4dd096f9a27a3791222c8b1c42502b8df34ae72ff602ce420738e370fa

Download Submit
/data/data/com.xiaomi.gamecenter.sdk.service/files/xiaomi.cfg

Filesize
48B

MD5
340611b379e362128c71623c5e8da1b4

SHA1
0673cee3ec93948c5474f182f9bc0bf0dbc0076e

SHA256
ecbb19ea2633933cda78f7ff1d954581fb582f04a4ef3104c28b20c9afe65f69

SHA512
7f6aa02295b963c4f3b1f93118e5a5230d163b54faafd0efb2ce3d5a8af9f1d8327f612013332388a6e10fb851496e147e300acc4f8d79389ffbb04ca2dd7555

Download Submit
/storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt

Filesize
339B

MD5
5af19ed3a113e4b7e09ac0375b7097c7

SHA1
f4de13428b3a8e46f452b97e7028f2f1236bca41

SHA256
417cf2e6ebc338e4dd8fdc7daad12673ce3ff3302a1d93754b8c050cf76ce6b6

SHA512
bf003c7b4ab448a91b4433d6228549e93b4f5e967a5208446d3c673d91bd874d2503d2e075de104194074a29f1cbbcd766cc21cc0390acd8a84d4def56e40f64

Download Submit
/storage/emulated/0/mipush/log/com.xiaomi.gamecenter.sdk.service/log1.txt

Filesize
508B

MD5
3db93b414f1442ef61253359292e3bfe

SHA1
a256961de27e02a1438b8264d80e441df3f0a511

SHA256
0c8398833a5b9be95766a6e4b4036ee6bb26b0339cdbab6c0e0311a08603d602

SHA512
b1147b7e29eca0d4f45ad9c28724d3e4c78f6146cbd6111e6086010fa6ba5c38574a9a2d044ce86a73bfc69cb3f700d093683403efc3c5732be00043ec0012a6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads