MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab
SHA3-384 hash:	2364d5ef1dae8c2d0ef59800c2b96bdfc5bd027513732a9ec171bab96fb46f7bb43fddfb0f608963ec7db41df86cb052
SHA1 hash:	ab08fb72da9ffdb8a95de0fbf4320a9216bfd266
MD5 hash:	5541daf958a603061908b3431b0b8f1b
humanhash:	maryland-freddie-paris-september
File name:	TikTok18.apk
Download:	download sample
Signature	FantasyHub Alert Create hunting rule
File size:	8'956'681 bytes
First seen:	2026-01-16 12:30:55 UTC
Last seen:	Never
File type:	apk
MIME type:	application/zip
ssdeep	196608:v6FWN5VgwBJpL9HX4TG/3tqedmMZkblRFblI0GJVvzge:vBMaJTH1qedrZkbldI0GJVL
TLSH	T18F963381F711581EC9B792370E9B973647269E2A8EA697036490373DBCB76C18F18FC4
TrID	49.0% (.APK) Android Package (27000/1/5) 24.5% (.JAR) Java Archive (13500/1/2) 19.0% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 7.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	apk
Reporter	juroots
Tags:	apk FantasyHub signed

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

67

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Tags:

signed

Link:

https://www.filescan.io/uploads/696a2fa0584f1963ad56f0be/reports/bd8fd54d-5805-4602-90f8-49ea6ff2ef85/overview

Incinerator Dangerous

Result

Link:

https://incinerator.cloud/#/public/report/5541daf958a603061908b3431b0b8f1b/detail

Application Permissions

Allows an application to request installing packages. (REQUEST_INSTALL_PACKAGES)

full Internet access (INTERNET)

view network status (ACCESS_NETWORK_STATE)

prevent phone from sleeping (WAKE_LOCK)

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab

Nucleon Malprob Susipicious

Score:

68%

Verdict:

Susipicious

File Type:

APK

Link:

https://malprob.io/report/ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3xvrhk7qtuew7aq64zl4gr47pgpsui3ljh2gzafav6zgo2upkwvq._file

Hatching Triage fantasyhub

Result

Malware family:

fantasyhub

Alert

Create hunting rule

Score:

  10/10

Tags:

family:fantasyhub

Link:

https://tria.ge/reports/260116-pqtfesgx5a/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/8f0c8015-49b8-4e45-8957-315e2d8dacdb

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ddeb13abf09d096f821ee657c3479f799f2a236b49f46c80a0afb2676a8f55ab