MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38
SHA3-384 hash:	9cc2e37a38f26b0ed0f3dcef9bdb5b0f3063f5eb6e19b0fadb41c6b7cf4810c4f64d6d76eb52f8eda436d388f8004ab4
SHA1 hash:	f1a882d145272e998463596e3203a8269404ea01
MD5 hash:	644321ca9abd32c5d8a6f5cafde61deb
humanhash:	tennessee-blue-quebec-robin
File name:	TikTok18.apk
Download:	download sample
File size:	7'640'329 bytes
First seen:	2025-12-06 16:11:35 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:whNXnA47j9kixuhA57I9iKyBaX7p43Sxexl:whrn9kix4A57AiKyIXWiYxl
TLSH	T10A761203F74E492ECDD2BA781953137166156CAC192092CB4A02F318BEB77E9AF16FC5
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

45

Origin country :

IL

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

android signed

Link:

https://www.filescan.io/uploads/693455dd6019bc7a8f81b28d/reports/0f41f7c8-2b82-4648-ba62-a055fd4873de/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/644321ca9abd32c5d8a6f5cafde61deb/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2025-12-06T06:56:00Z UTC

Last seen:

2025-12-07T01:41:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38/results?tab=lookup

Nucleon Malprob Malware

Score:

75%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38/

ReversingLabs TitaniumCloud Android.Trojan.Generic

Threat name:

Android.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-06 16:12:14 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hkz4ypan6awxepefbzys7jpuudpct4vn34wfbpx74irbclblvi4a._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/251206-tnk4gswnbj/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/83b299f1-97ff-4e40-9600-e3c7affb74f8

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/3ab3cc3c0df02d723c850e712fa5f4a0de29f2addf2c50beffe222112c2baa38