MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5
SHA3-384 hash:	bb422879dbfe356b7e9e24f82218cbb5d79105066cd6378bdb646859feaec0e8e0e3edf7f544485ba407f8143c1a1241
SHA1 hash:	4dc3cf8292b62ed991cda041619d5decc0146ffb
MD5 hash:	165d34ede3c47369cbf04036f04a7d12
humanhash:	kansas-oven-sixteen-lamp
File name:	TikTok18.apk
Download:	download sample
File size:	7'640'329 bytes
First seen:	2025-12-07 11:25:06 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:whNGnAE7j9kixuhA57I9iKyBaZhWgbrBhp/exV:whwn9kix4A57AiKyIOgAxV
TLSH	T1BE761203F78E492ECDD2BA781953137166156CEC1960928B4A02F318BEB73E9AF15FC5
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

37

Origin country :

IL

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

android signed

Link:

https://www.filescan.io/uploads/6935641cbc15eab491f64841/reports/d67f2c38-9e65-488c-9845-34b3f22a100f/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/165d34ede3c47369cbf04036f04a7d12/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

Apk

First seen:

2025-12-07T06:05:00Z UTC

Last seen:

2025-12-07T06:05:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5/results?tab=lookup

Nucleon Malprob Malware

Score:

75%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5/

ReversingLabs TitaniumCloud Android.Trojan.Generic

Threat name:

Android.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-07 11:25:25 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

6 of 36 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hgoeqgnpiixfqfrzze2q3s5hdmhoac4hutjx3iiya3nv4jnavxcq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/251207-njeg9a1kex/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/99467813-a1b8-43c6-ab32-1bb2a5c74a36

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/399c4819af422e581639c9350dcba71b0ee00b87a4d37da11806db5e25a0adc5