MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588
SHA3-384 hash:	1f3c0215b995eee1673ae188b81200dfd12939af4df3a7757bb735bd07e8c89d581e70c5aaff177f40bfd16c0025861c
SHA1 hash:	904c4dc0e93b15554c8b4112dd4a792f493d83da
MD5 hash:	51f91a38014a4854039fd315d84c3d4f
humanhash:	stairway-robin-ceiling-mexico
File name:	TikTok18.apk
Download:	download sample
File size:	7'369'993 bytes
First seen:	2025-12-10 09:04:59 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	98304:VmhNtbeLnAwNS8gtiAu+IQNAs2gZmIx3Eg3CBZ/CY9mozszKVnnVZ6eRK4yw9:whN8nAX8gAmIJzeX0g36ZiozszBex79
TLSH	T12A761203F78E492EDDE2B97C099713716619ACEC1910928B4D02F318BEB72D96F25BC5
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

106

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

android signed

Link:

https://www.filescan.io/uploads/693937fa1eac7b9b76a35e25/reports/664166bc-cb20-4858-a059-09f47ac409d7/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/51f91a38014a4854039fd315d84c3d4f/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

apk

First seen:

2025-12-10T08:30:00Z UTC

Last seen:

2025-12-10T18:03:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588/results?tab=lookup

Nucleon Malprob Malware

Score:

75%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588/

ReversingLabs TitaniumCloud Android.Trojan.Multiverze

Threat name:

Android.Trojan.Multiverze

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-10 09:06:20 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=igjq434rq7el4tvecmb53fl5ot3fxf4uimq2esraakhhnuioawea._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/251210-k2q28awqdp/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/5235c9bc-ef28-4061-9f70-7d3e131ccc6f

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/41930e6f9187c8be4ea41303dd957d74f65b97944321a24a20028e76d10e0588