MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b
SHA3-384 hash:	8fcf837ed9f59dfd81759ada460f67d7cd4bb3c72f0093a63a5e437b1e12fec554b87d422da08ba34d06e46c90969f14
SHA1 hash:	30ca32977cacf2b62dcdbed7a06831c1938fc31d
MD5 hash:	419e5600e1c7952ea826d5417171960a
humanhash:	cat-ack-india-gee
File name:	TikTok18.apk
Download:	download sample
File size:	7'525'641 bytes
First seen:	2025-12-02 08:26:03 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:whNWnAzRU5BQ13O3eFgBij+7qvMFhVexR:whNMuSQa7kMFSxR
TLSH	T19C761203F78E492ECDE2B978499713716A15ACEC1910828F4D02F218BEB76D95F26FC5
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

32

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

android signed

Link:

https://www.filescan.io/uploads/692ea2b2fb57498b31682c09/reports/e970f647-9502-4de3-95bc-7227d19135d6/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/419e5600e1c7952ea826d5417171960a/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b

Nucleon Malprob Malware

Score:

75%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b/

ReversingLabs TitaniumCloud Android.Trojan.Generic

Threat name:

Android.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-02 08:26:33 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

6 of 36 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wszbs7c2r4hjxf3g7i46tnjyk2bij3ekacmycg4lkt7gufackrnq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/251202-kb2q2adl8w/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/91138dd9-0a4f-4b88-a8c0-d7efdbec11ca

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b4b2197c5a8f0e9b9766fa39e9b538568284ec8a0099811b8b54fe6a1402545b