Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    2664414s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 22:36

General

  • Target

    984acea382caf3143dd54d67359df1ae3d311f64831478a0f2a3e202859e62b6.apk

  • Size

    7.9MB

  • MD5

    ebdf594b9f89cb21f9976f92f8a40d42

  • SHA1

    3eb297c2dc9ac642b16dca4bacc1dc3fbdb638d4

  • SHA256

    984acea382caf3143dd54d67359df1ae3d311f64831478a0f2a3e202859e62b6

  • SHA512

    e32dd5165ad8795c6aabb0c9778364a884e8bcff28a4396a568c0d6d83f1721a862e6e62108a22ac1898a0a7816d636575d6ab074ae6cde47bafe89734df5a56

  • SSDEEP

    98304:iA5rkC395287+P+8pm7sUyM7Dcc+fqJ8uhW1Spx4lSZbddbAaJZN9wSMbHfBz7mz:i1Ct5ROUpUOJ3hW1lmJZAs8/N7mbv

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.anysoft.tyyd
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4449

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.anysoft.tyyd/databases/ListenRecords.db

    Filesize

    16KB

    MD5

    3ead63dfe20a4c53861e15e552e7d0bc

    SHA1

    b200859db051a34062d623b7f44ac604cc5478d9

    SHA256

    423910127323fac83568a3656f2dfebcadb6befffe8a30ca99859ba691bc5a9a

    SHA512

    a8b44f01b07138c79d6dc3b23b28ee828565ce172c7e0590016281262abe2c8233e580f607824c9fe4409cec5d7b8c025cdc8ec839f60624adebf980973be938

  • /data/user/0/com.anysoft.tyyd/databases/ListenRecords.db-journal

    Filesize

    512B

    MD5

    814786bc1d09819ff4e937bcf96412ae

    SHA1

    1d689475b980dbe12468461dc3019cab7b7994ca

    SHA256

    a5ff8c46e9a45d3118065daf14743ca19133ffe229c375429000906f18ce81b0

    SHA512

    14c0feea6fc092e2de43c600b5c6f082f0c39e641d2e49366d7a284bfab3f0680967e785aa74797c4296b5565a3ed9b1622f539331daca8b8219d8d72189d79d

  • /data/user/0/com.anysoft.tyyd/databases/ListenRecords.db-journal

    Filesize

    8KB

    MD5

    d2f6e53e954b1e060bf9a8a232a45913

    SHA1

    f25c660588a1e211fba62fe4dddb192b7dd449f3

    SHA256

    7bbf33e076fa7d7faca45cffac1f6430c8250f261ccacc86ba01cb66e9a06622

    SHA512

    6449ca35cb2d9b40b3d939da4dc556043815c1239b2f368f743d2a13d574f40117f786aabfb753c3433d301c6c0a692ce830b22189f782a1e58ea4687b0ab86f

  • /data/user/0/com.anysoft.tyyd/databases/ListenRecords.db-journal

    Filesize

    8KB

    MD5

    c819011c9a9e06ef9702b338c9becffa

    SHA1

    f3a26649003be9843c581b8d72bc6026d3b42c62

    SHA256

    2469d8029bd76c8b12e32fdf06bdbf7232ed6ffd2989e499086b2829b4e473b2

    SHA512

    1312d7fc9d1732cc97d1f52872ea0114bca1abafaf8e6e7d71a9d801b8348291cbe133dbe4e833aaf2dbf46edba1892fafee649454774b59d0cc13c34111935e

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db

    Filesize

    40KB

    MD5

    91bb84c5642cd6c9da04a5a64f056ef0

    SHA1

    e50e7dcc83fe77b6f50c3e7cc483f54f74f93064

    SHA256

    9b26acd74f122aad7fd192b19ccb6d19a0e46ded6a30913da0fa285ce68704da

    SHA512

    f51af5f48235cfe97b3b5dbef85c52094cfdc2d2a1d7d7e4b4788cf2bd56d9640cf52de7371b2da001bc7bc5b576db70737578766306a8816c7837096de93dbc

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db

    Filesize

    20KB

    MD5

    3618f8bfb9e544b74cd97093cce55ae0

    SHA1

    9fd7fdf363582063a9cf81415d240b2ad9f7ebca

    SHA256

    029ffcdf371396d6788bdba13146548aec40791e5de5267ef05325724e5da5b2

    SHA512

    4515fec71ca19723d6d3e668d186ec230f35ba7302c69f75f741bdee9c6bece43c7727f8edac5605d3b8e840bff119bd3147aba47d54f30675541651987551f0

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db

    Filesize

    36KB

    MD5

    c87ff1beab1255cf887270d12f9c099f

    SHA1

    08a846aabedfb76e8f12b1eb226a39565f7c79ec

    SHA256

    47248d4c07dbea7dc93071e0d4440c05586a3693f49914cd95ccf91abf30f4b8

    SHA512

    b71c8ac17075ec8f5e0b645ca55fe2b0f19c0ed32cd7b4e8d3b37fc8beb7e2bc60356d8400b33f31fe4adcda689de7b7e084d211e4090a1a5ff05faaf5759a23

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db

    Filesize

    32KB

    MD5

    7a41a9b5290dcb120768673bb2039907

    SHA1

    520ef1220ab9b40054c30969bb3b20974ac2627c

    SHA256

    c3416a18ad3a744ffefed1507eb39c785b0d36ac83a17b5d73e18bcb75456985

    SHA512

    e35760b0686aa1fbb5dfb73eae337af98c586a4091322fbdf27a41cd36a71b592b2bcad2fc7f25a8caf51998a937a9d8265cd56c9225400529c3d845bedef7e0

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db

    Filesize

    26KB

    MD5

    224860d3f57400b687440f0dd6e9f357

    SHA1

    1971e30188106c198fa7130ffba05bf71447c626

    SHA256

    56c9680bcf89c047a6a21383ef00c1dfec0974076467552c7fa4efb4f544ce75

    SHA512

    34e5209da589ce497161c40354e86b285332c1258c6764f6ab2e1d72e5ce20ff4f501720164b5a4cc99082e90381eeb9e638d55d3c98b4b88a2d36074bd919f6

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    12KB

    MD5

    87865514bd083299023f6e0f8bbcafec

    SHA1

    35ef244c9bad638f5e09d4b61ba99c610d5a5033

    SHA256

    c5948dc0c60dc435ce4ae70b3038577c0611914f211580c7b092bbb67019966a

    SHA512

    22b20fc144f5b7dc5d81faa31d9a097a1f1bef299beb4bf9bcba07f7de97bcf772f6a0f58c4ce7369efa60f761df1d0b795766ea48627d0d0b51044096907a7a

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    12KB

    MD5

    f10e4ccaaf39c677ba53c816370cd009

    SHA1

    5145304c563fcba5571775f527299914ba3d9859

    SHA256

    65944690c8af190d1cac1d8854c28305c3dc0d1e0e99a10dd57920cb3f550dcb

    SHA512

    6b76fbf3c676cf5159130b589cc334bf06e56ea2897d22a18405fa06cccedf59195eea8ab86a25b5b131e34b05a2c85fe15e55c6afb4c17b8ff489fcc5a49b8a

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    12KB

    MD5

    997ce374a9a2544d27fd277f8860957d

    SHA1

    67d5d3ccadb4085ffa12098294bbd90bccd75d38

    SHA256

    d310b30c646a4579e839054049e7e69fb7d9f432f2f4e82b58aac77282c208a5

    SHA512

    dd475bb19e605fad09cec75fbdd339637569b81c6dd606f85f9f9e74ac5fae17c4a250b8a85a9d0a8aac9567f9b1d32242c0e2ef10d9e17562fbc2cc7e8c0829

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    512B

    MD5

    d80c257c33184922f10eb648883b0766

    SHA1

    a21483bb8701ddbb7e6850e9ddfb67d111429522

    SHA256

    69ce66f99b064e92d46cccdcb999c5b6ece4a72e6cd454412d5ba6ede738a2c2

    SHA512

    06f2b9343c5a0fdc6911f690a6f03516439ee9e96dabe391dc7ab0b0202ed105701b89bacac7d50b725afdcd4249843d89d4cea56d2e9a8210b81f68264beda7

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    8KB

    MD5

    67c69f4566058e656815e5764795bd39

    SHA1

    89da18cc71ca29b2370317c91a77dbed41085dff

    SHA256

    91e44ea0c023b8aa9a0e70f38f2248405ba1aef0438787ac624a962e8442accb

    SHA512

    388dd357d2491eaedb272f6f17ac721553a25f381ce64af660b7f17b3198e8b20d5d713b2ab141b0aba4979e85a0768e364cd3053551ef07d0120d10f37117b9

  • /data/user/0/com.anysoft.tyyd/databases/netstat.db-journal

    Filesize

    8KB

    MD5

    fcd97a72290e85563db564bbe88a6463

    SHA1

    b45abe5c7cd1b6229864ef9675484ddcbf0de0f9

    SHA256

    3d9d9cdb0ffadbbcf31220487b038873a9424ad3cda16de9ebc7f211886b0bb6

    SHA512

    db2a3420621b53320c1bfed9d7ac935c05b9cc61664540880bab463c3d92f23d0f0697c6b739fdddd65173c7d0f714653d7445aa567c8eac0fb3c860bf820b97

  • /data/user/0/com.anysoft.tyyd/databases/tyydprovider.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.anysoft.tyyd/databases/tyydprovider.db-journal

    Filesize

    512B

    MD5

    98430bac284398e40c27ecef5a346701

    SHA1

    f133489b3a2bfb3a21119c45d9b782d379ba1df1

    SHA256

    c5002fca5d3782798e5e4e8c098b49d4c10812c2310cb5d8460076eed1ea3dda

    SHA512

    2838db98447c82b8d8a313937ddaf41d19ec8f4b11c73257099e6b2f26269a0c17a84a34ee5906c023fe71729274794871cbb6186b94f678f858e24a2a26fef7

  • /data/user/0/com.anysoft.tyyd/databases/tyydprovider.db-journal

    Filesize

    8KB

    MD5

    cd08599ab67fe36ae50faa5dbb4a9aae

    SHA1

    939d103bea0fa694d0dfb8fc6e7d6c07afbd5b26

    SHA256

    384e3675b6627497d398a7ba03c07cc5f464622c6f25123fa9917b82cf69fbfe

    SHA512

    6336f39030d137b98537a77cb8ad25525597448d9ab1a7a9423ae1fd90a2a741c616b35440463c043df813e5216675349650365798c909bb637441d5d5879020

  • /data/user/0/com.anysoft.tyyd/databases/tyydprovider.db-journal

    Filesize

    8KB

    MD5

    d0fcb692957f4c7f3673d230e060cae3

    SHA1

    56433f56593bd22b4e3a3f7956dab2f75a88f858

    SHA256

    667e331f46a8e1b5304d8fd6da6d703eb456dda25f3b00a54cd8784d4b86acfb

    SHA512

    a9c0d454c7d980aeb773e041b0c318a078c0896e38dd89e74326e5a29ac186646614371954ff1df3bf9107ab81854aa548ab5af313d7a0d34cd9a82cb8d4e550

  • /data/user/0/com.anysoft.tyyd/files/.filelog_pv

    Filesize

    161B

    MD5

    a52e4bb1c1137e32e66f124f04c0dcdc

    SHA1

    c2b8b96a2a0f8e3eb4c0128cc0497804fa310868

    SHA256

    a85162a5e56c3c35c34aeadf59d118c1a21cae993ad072bc29c89283a3209f1e

    SHA512

    53927860cfabcd01835011cf1844f74c0ccdfb4f91ddb962db6180f4a30641cec489f3f89da8cc3553e1ddcc70b8ae3a38b97933ad47f4502ddd13b6178417be

  • /data/user/0/com.anysoft.tyyd/files/mobclick_agent_cached_com.anysoft.tyyd

    Filesize

    121B

    MD5

    76efcddbfd778f3280cb03fc127be4ca

    SHA1

    4d198fbeedc232c30a6489abaab3b976d35a37c0

    SHA256

    edc16683ac81db813d2a56bfe7e903a4f469ae0ff8a034e500a999041d92e7c5

    SHA512

    d63d360aa6b246f194df613db8e76b99febe97f77b0407aba6e572e9d7ca79e91b5c61d21f8982c6f0e8b258697f7c5de00755969aa71437b8bd3f3c583430d1

  • /storage/emulated/0/Android/data/com.anysoft.tyyd/tytslog.tmp (deleted)

    Filesize

    23KB

    MD5

    570ee0c20068a88a3dc09cebfe2031c6

    SHA1

    c18901838fc94d50ba43b72fa472849019d95a66

    SHA256

    492acd69006c064b5f2d7e7e70427106fe5139a3443b29dfb9e78eeb48e0af02

    SHA512

    64b32d9772d21e342c7e00c7b0a0e9a517a24d2eb3aa5d3dce9bf1a94191bf1db3bc7d8bf6b92804a4f02e7c0e78b3c524d079345441b7b5245693621e15cc70