Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2793074s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 22:36

General

  • Target

    984acea382caf3143dd54d67359df1ae3d311f64831478a0f2a3e202859e62b6.apk

  • Size

    7.9MB

  • MD5

    ebdf594b9f89cb21f9976f92f8a40d42

  • SHA1

    3eb297c2dc9ac642b16dca4bacc1dc3fbdb638d4

  • SHA256

    984acea382caf3143dd54d67359df1ae3d311f64831478a0f2a3e202859e62b6

  • SHA512

    e32dd5165ad8795c6aabb0c9778364a884e8bcff28a4396a568c0d6d83f1721a862e6e62108a22ac1898a0a7816d636575d6ab074ae6cde47bafe89734df5a56

  • SSDEEP

    98304:iA5rkC395287+P+8pm7sUyM7Dcc+fqJ8uhW1Spx4lSZbddbAaJZN9wSMbHfBz7mz:i1Ct5ROUpUOJ3hW1lmJZAs8/N7mbv

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.anysoft.tyyd
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4251

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.anysoft.tyyd/databases/netstat.db

    Filesize

    32KB

    MD5

    cafdc34fad2882a8a0ccfbdcf594aa3f

    SHA1

    8d8e4ff357a794b982556302429bfdff8ae0e188

    SHA256

    13c051f5b5c61d43366cf8cccdc620dd2b1f9eb10874e5217d3b279a8881a831

    SHA512

    1cb949ae72d3c0cb9d1773a0df87c18082ad799b7d6df0002850d4aa548d477bbd78fd76509ce2d375797a75d64496e76bd64a2c764de6252297abf159675d79

  • /data/data/com.anysoft.tyyd/databases/netstat.db

    Filesize

    20KB

    MD5

    26aa74761be73f8d9ffa5436f584245b

    SHA1

    87da755497b84dc87102140d477fad46b4f4a787

    SHA256

    de54b784346391a3cc5c9dd4afb7c3ce83ec7ea6fb8521d187208d1a5b239756

    SHA512

    9f86491fb88cf8c3628c25911ff17cae16bd3e6111cd0195a1134bd532ae76185ffa35f803d7a6f466bd259a9c45277566da81a4a3dc093be704397cede5acc5

  • /data/data/com.anysoft.tyyd/databases/netstat.db

    Filesize

    36KB

    MD5

    648e4ba5826749a0e6f8db32f4d90d73

    SHA1

    b10f3934f50fed7a22358947b5b9625be63051ff

    SHA256

    16e1cf4f0d675ad22efceab6f0eeb918ae12ac5f2f62c04c2c12c5577c37df77

    SHA512

    1dd1065813343da81c7ec1d95ad2096dab7db31841dd9881e929858a7c7f9da91bbe2b43c23e7b541974de6342b410956f6dddb64b7fed1d0734db6c79aee52f

  • /data/data/com.anysoft.tyyd/databases/netstat.db-wal

    Filesize

    8KB

    MD5

    45d27b8cf8786e8219f23ee8636f1373

    SHA1

    3d210356fd9014fa03f68981d82287bf34f1b9e6

    SHA256

    7779b2ae55a95e28f5eafc158c89fe473c872e5a6af6ceecab176267e7bb776e

    SHA512

    281baf6f9ab57981278c903a2160319ed17639c049154e4f99e495d2e98251b65f4bf0c1789ce98a200d116022094f2046ddbbaef86788a65d732cd1f97bccc9

  • /data/data/com.anysoft.tyyd/databases/netstat.db-wal

    Filesize

    8KB

    MD5

    999884d474ff027aa40c8796ce0693b2

    SHA1

    8772483e2e557686e8415c2796364fe12fcc4065

    SHA256

    9edfd0d1130b613d4f989845f871d652068edf656263fc6829d41dc7d23bd3af

    SHA512

    768eeb0795516bf890eb674b45631ef3470297885ac7d8f0b97246fa579bc29a5665f50885270cbee891916e93dd0927145abd7ea857c266d7617b89c8b4ad7a

  • /data/data/com.anysoft.tyyd/databases/netstat.db-wal

    Filesize

    8KB

    MD5

    298adb659291061304eeaad999e0b25a

    SHA1

    53f04ce37240d8a71980378f4ac271636b0136cd

    SHA256

    a77b5b2cab5e28fca038737a18bdfc25a2dd553a3ed86189bd93f0561d314663

    SHA512

    eff26baacb0610b2de5fe6312b7d0310607a3ba29aef1c4941202bbbf9b330664d77fbf4a81abf8a5ba943667c048e47e2263c761d563af906470411004eddc3

  • /data/data/com.anysoft.tyyd/databases/tyydprovider.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.anysoft.tyyd/databases/tyydprovider.db-journal

    Filesize

    512B

    MD5

    395a4cb3e8ded5639ba0164eb25db838

    SHA1

    5e909d334519200bcbbdab6bb2aede28abd2e855

    SHA256

    26e4bfd1796063ea3db385b14c818d1db3230aa8f2d64527ae6c001677bc754e

    SHA512

    59f9f9ed99f3325bfaafc8e829eeb4c9927d363d68213626083b5e733cc6aa2c519093a81a716d38900e0cac7ca7698d9ffa6b084543488f54cb9a53de662da9

  • /data/data/com.anysoft.tyyd/databases/tyydprovider.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.anysoft.tyyd/databases/tyydprovider.db-wal

    Filesize

    16KB

    MD5

    c57b4d1a4fdee1ddf3e54e0e3d0c84db

    SHA1

    66a856801dcda6926d4bfe04b5c9d39cd6fc4e6e

    SHA256

    5fc006588d56198e1d84fb3aaa5ea71397a002a62210be54125f53472f5943c8

    SHA512

    e8fbc1f3df0856bb135eb7239faa687dbd2dda82f316c6205c77a1e1652ff83d09f1f5dc8100baadb047e013aa0779fe37672d6a6e3cd194454175a6d2ea64e1

  • /data/data/com.anysoft.tyyd/files/.filelog_pv

    Filesize

    176B

    MD5

    fa9a05c0313be9279a38eae53674f71d

    SHA1

    a3d5c58a09a01df88c3b477673052418169a6d75

    SHA256

    25975559eaa2f5927c55cd1c0587017a7aaf316024d40246e963fe2e4a851cd3

    SHA512

    f91f1a892d8ee8eaacd232969316f22fa7f1eec1642ec983fc2a7f68c7ab3d5a4af06375d85edfb6af9512df2689e70cf0a1bfa475ba413c5bd453800049725d