MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692
SHA3-384 hash:	6c8e1e9aba1c67d53666a2330d84b18e84f29b07173df7c3c7844685fc06a1caa2419b12310858f46c6735000d743d88
SHA1 hash:	aa8f7c61896e8b66b7c1eafb787b716f5ef21258
MD5 hash:	7efc6546196d591104e9d86d579844b4
humanhash:	glucose-lake-artist-jupiter
File name:	TikTok18.apk
Download:	download sample
File size:	9'409'801 bytes
First seen:	2025-12-01 20:32:52 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:whNDnABoG3N/CDfIn9RoKbMAGhBUbAIRUGexeCTAUPFVY9f+S5X:whSoG1Cc9RXlAFdxeCTAUPFVY9f+S5X
TLSH	T11B961203F78E492ECED2B97849A3137166056CEC2950938F4902F218BE776E96F25FC5
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

39

Origin country :

IL

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.Android.BankBot.15879.10410.2940.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

android signed

Link:

https://www.filescan.io/uploads/692dfb9009ae702a4d23a776/reports/0b5993a8-1874-4051-b39e-4331e49f5b75/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/7efc6546196d591104e9d86d579844b4/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692

Nucleon Malprob Malware

Score:

75%

Verdict:

Malware

File Type:

APK

Link:

https://malprob.io/report/ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692/

ReversingLabs TitaniumCloud Android.Trojan.Generic

Threat name:

Android.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-01 20:33:23 UTC

File Type:

Binary (Archive)

Extracted files:

3

AV detection:

6 of 36 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zjnub2jy62bsdx5du7y22kqd3nh7norh7wxf4iygktgvymaja2ja._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

n/a

Link:

https://tria.ge/reports/251201-zbzzrseq91/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/7a626a5b-034c-4a23-becf-fe50dc7d6adb

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ca5b40e938f68321dfa3a7f1ad2a03db4ff6ba27fdae5e230654cd5c30090692