Errors

Reason
unexpected chunk type

General

  • Target

    TikTok v30.4.1 [Mod] arm8.apk

  • Size

    187.2MB

  • MD5

    55117f98ada4bdb61e51057de6954628

  • SHA1

    1d8c1e1a0dd3bca1a80d92f20c022c28764a2a67

  • SHA256

    ca788b492d91f75f83f9fe2f56c9814505649eccebbada13fde177fe97a0ad7d

  • SHA512

    b269860b5290f7e3367e9d6361e981201e951743262222db12f439e3237a891c4af2769cb68ab7846f76faf2b920b5173fcd33a827180f7cc3c13882cd9ba819

  • SSDEEP

    3145728:gS02ofEw0XFIoC404x+hgUZs6VE5jP6HxJA5Zm6URbQnaOUjgaDIwG6/E:cW+P404VGnWjgxJA5hURcEfM

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • TikTok v30.4.1 [Mod] arm8.apk
    .apk android arch:arm64

    com.zhiliaoapp.musically

    com.ss.android.ugc.aweme.i18n.musically.cut.AvatarChooseActivity


  • 10k_dark_web_filtered.txt
  • AkzidenzGrotesk-BoldCondAlt.otf
  • ArrowUp.json
  • BalsamiqSans-Bold.otf
  • BalsamiqSans-Medium.otf
  • BalsamiqSans-Regular.otf
  • CN_content_data_transmit_url.json
  • I18N_sys_emoji.json
  • ProximaNova-Bold.otf
  • ProximaNova-Reg.otf
  • ProximaNova-Semibold.otf
  • ProximaSoft-Bold.otf
  • ProximaSoft-Medium.otf
  • ProximaSoft-Regular.otf
  • Roboto-Bold-Modified.ttf
  • Roboto-Bold.otf
  • Roboto-Medium-Modified.ttf
  • Roboto-Medium.otf
  • Roboto-Regular-Modified.ttf
  • Roboto-Regular.otf
  • Roboto-Regular.ttf
  • SanFrancisco-Bold.otf
  • SanFrancisco-Medium.otf
  • SanFrancisco-Regular.otf
  • TikTok-Display-Bold.otf
  • TikTok-Display-Medium.otf
  • TikTok-Display-Regular.otf
  • TikTok-Text-Bold.otf
  • TikTok-Text-Medium.otf
  • TikTok-Text-Regular.otf
  • a-
  • ae.json
  • api_key.txt
  • auto_cut_button1_dark.json
  • autocut_01.json
  • autocut_icon_anim_1.json
  • autocut_icon_anim_2.json
  • autocut_icon_animation.json
  • av_ic_water_mark_16_9.png
    .png
  • av_ic_water_mark_9_16.png
    .png
  • aweme.json
  • b-
  • bar_frag.glsl
  • bar_vertex.glsl
  • baseline.prof
  • baseline.profm
  • bd.json
  • br.json
  • bubble_longpress2s.json
  • collect_cert_fact_detail.json
  • common_feed_anim_follow_people.json
  • common_feed_friends_tab_lottie_arrow_double_up.json
  • common_feed_photo_loading.json
  • countdown.json
  • countdown_10_lottie.json
  • countdown_3_lottie.json
  • de.json
  • dm_input_status_dark_mode.json
  • dm_input_status_normal_mode.json
  • dsl.json
  • duet_default_layout.zip
    .zip
  • GESticker_surface2/.DS_Store
  • GESticker_surface2/content.json
  • GESticker_surface2/generalEffect/.DS_Store
  • GESticker_surface2/generalEffect/Resource/.DS_Store
  • GESticker_surface2/generalEffect/Resource/matting.fsh
  • GESticker_surface2/generalEffect/Resource/normal.vsh
  • GESticker_surface2/generalEffect/generalEffect.json
  • __MACOSX/._GESticker_surface2
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GESticker_surface2/._.DS_Store
  • __MACOSX/GESticker_surface2/._content.json
  • __MACOSX/GESticker_surface2/._generalEffect
  • __MACOSX/GESticker_surface2/generalEffect/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/._Resource
  • __MACOSX/GESticker_surface2/generalEffect/._generalEffect.json
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._matting.fsh
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._normal.vsh
  • config.json
  • event.lua
    .js
  • duet_layout_drag_lottie_mt.json
  • dynamic_option_keys.json
  • ecommerceinfluencer_live_rank_list_living_line_animation.json
  • ecommercelive_shopping_bag_daily_anim.json
  • ecommercelive_shopping_cart_daily_anim.json
  • edit_photo_gesture_guide.webp
  • editor_pro_guide_pinch_in_gif.json
  • editor_pro_guide_trim_video_gif.json
  • editor_pro_magic_guide_lottie.json
  • editorproguide.json
  • ending_watermark_sonic_audio.aac
  • es.json
  • feed_ad_transform_btn_ctrl_lottie.json
  • feed_fill_favourite_add_lottie.json
  • feed_fill_favourite_cancel_lottie.json
  • feed_fill_like_add_lottie.json
  • feed_fill_like_cancel_lottie.json
  • feed_guide_hand_swip_lottie.json
  • feed_live_volume_icon_lottie.json
  • feed_live_volume_icon_lottie_s1.json
  • feed_long_press_lottie.json
  • feed_stroke_favourite_add_lottie.json
  • feed_stroke_favourite_cancel_lottie.json
  • feed_stroke_like_add_lottie.json
  • feed_stroke_like_cancel_lottie.json
  • finger_swipe_right_guide.json
  • finger_swipe_up_guide.json
  • fr.json
  • gb.json
  • gestures_swipe_left_tux_lottie.json
  • gestures_swipe_right_tux_lottie.json
  • home_swipe_up_lottie_android.json
  • hwdec.json
  • ic_bookmark_1.png
    .png
  • ic_bookmark_2.png
    .png
  • ic_bookmark_stoke_1.png
    .png
  • ic_home_like_after.png
    .png
  • ic_home_like_before.png
    .png
  • ic_like_fill_1_new.png
    .png
  • ic_like_fill_2_new.png
    .png
  • ic_like_stroke_1_new.png
    .png
  • ic_live_profile_paly.png
    .png
  • ic_live_profile_paly_background.png
    .png
  • icon_home_dislike_new.json
  • icon_home_favorite.json
  • icon_home_like_new.json
  • icon_live_room_flag.json
  • id.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • in.json
  • interest_list_BR.json
  • interest_list_ID.json
  • interest_list_IN.json
  • interest_list_TH.json
  • interest_list_US.json
  • interest_list_VN.json
  • iq.json
  • it.json
  • jp.json
  • jsb_whitelist.zip
    .zip
  • jsb_whitelist.json
  • kids_mode_allowlist.json
  • kids_ruler_config.json
  • lark_loading_icon.json
  • libhexagonAlg_skel.so
    .elf linux
  • like_reminder.json
  • like_reminder_bold.json
  • like_reminder_stroke.json
  • line.png
    .png
  • little_audio_wave_anim.json
  • loading.json
  • log_tea_dict.kv
  • log_tea_dict.txt
  • lottie_double_points_loading.json
  • lottie_video_loading.json
  • lynx_canvas.js
    .js
  • lynx_core.js
    .js
  • mask_2x.png
    .png
  • mask_frag.sh
  • mask_vertex.sh
  • mention_and_hashtag.ttf
  • metadata.txt
  • music_dsp_author_follow.json
  • musicrecognizing.json
  • musicsearch.json
  • musicwait.json
  • mx.json
  • my.json
  • na.czl
  • nd
    .elf linux x86
  • ng.json
  • nonblock_white_circle_load.json
  • omsdk_v1.js
    .js
  • other.json
  • pe.json
  • ph.json
  • ph_index
  • ph_raw
  • photo_search_loading_anim.json
  • pieces2.png
    .png
  • pipo_starling.json
  • pl.json
  • plugins.json
  • poi_sticker_iconfont.ttf
  • profile_live_font.png
    .png
  • reshape.zip
    .zip
  • __MACOSX/._config.json
  • __MACOSX/._distortionFaceu_test
  • __MACOSX/._event.lua
  • __MACOSX/distortionFaceu_test/._.DS_Store
  • __MACOSX/distortionFaceu_test/._content.json
  • __MACOSX/distortionFaceu_test/._represent_Plasticine.txt
  • __MACOSX/distortionFaceu_test/._represent_Plasticine_organs.txt
  • config.json
  • distortionFaceu_test/.DS_Store
  • distortionFaceu_test/content.json
  • distortionFaceu_test/represent_Plasticine.txt
  • distortionFaceu_test/represent_Plasticine_organs.txt
  • event.lua
    .js
  • right_pic.json
  • round.png
    .png
  • round2.png
    .png
  • round3.png
    .png
  • round4.png
    .png
  • ru.json
  • ruler_config.json
  • sa.json
  • search_LIVE_1color.json
  • search_check.json
  • share_navi_create_btn_animation_fallback.json
  • share_to_story.json
  • share_to_story_unify.json
  • shopping_car.png
    .png
  • slardar.properties
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • smooth.zip
    .zip
  • GeneralEffect/.DS_Store
  • GeneralEffect/content.json
  • GeneralEffect/generalEffect/.DS_Store
  • GeneralEffect/generalEffect/fshader_alpha_boxblur.fs
  • GeneralEffect/generalEffect/fshader_boxblur.fs
  • GeneralEffect/generalEffect/fshader_epm.fs
  • GeneralEffect/generalEffect/fshader_var.fs
  • GeneralEffect/generalEffect/generalEffect.json
  • GeneralEffect/generalEffect/vshader_boxblur.vs
  • GeneralEffect/generalEffect/vshader_epm.vs
  • __MACOSX/._GeneralEffect
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GeneralEffect/._.DS_Store
  • __MACOSX/GeneralEffect/._content.json
  • __MACOSX/GeneralEffect/._generalEffect
  • __MACOSX/GeneralEffect/generalEffect/._.DS_Store
  • __MACOSX/GeneralEffect/generalEffect/._fshader_alpha_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_epm.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_var.fs
  • __MACOSX/GeneralEffect/generalEffect/._generalEffect.json
  • __MACOSX/GeneralEffect/generalEffect/._vshader_boxblur.vs
  • __MACOSX/GeneralEffect/generalEffect/._vshader_epm.vs
  • config.json
  • event.lua
    .js
  • snapboost_list.txt
  • snapboost_list_coldboot_top400.txt
  • snapboost_list_ecommerce.txt
  • snapboost_list_newuser_top200.txt
  • snapboost_list_newuser_top400.txt
  • snapboost_list_newuser_top600.txt
  • snapboost_list_second_page.txt
  • ss.properties
  • star2.png
    .png
  • star3.png
    .png
  • star_lottie.json
  • stickpoint_switch_music_loading.json
  • story_breathing_ring_lottie.json
  • story_upload_loading_yellow_lottie.json
  • swipe-left.json
  • swipe-right.json
  • tablet_horizontal_guide.json
  • tablet_horizontal_guide2.json
  • tag_profile_live.json
  • textmode_bg.png
    .png
  • textmode_main.png
    .png
  • th.json
  • tool_editorpro_btn_tux_lottie.json
  • tool_editorpro_btn_tux_lottie_dark.json
  • tool_recording_dark_lottie.json
  • topic_interest_list_US.json
  • tr.json
  • trans_btm_frag.glsl
  • tt_double_tap_like_lottie.json
  • tt_face_attribute_age_v2.0.model
  • tt_face_extra_v14.0.model
  • tt_face_v11.1.model
  • tt_feed_like_cancel.json
  • tt_feed_like_tap.json
  • ttlive_FaceReshape_V2.zip
    .zip
  • FaceReshape_V2/config.json
  • FaceReshape_V2/distortion.json
  • ttlive_Live_Beauty_12.zip
    .zip
  • Live_Beauty_12/beauty.json
  • ttlive_anim_boost_card.json
  • ttlive_base_gift_combo_font.ttf
  • ttlive_beauty_composer.zip
    .zip
  • ttlive_beauty_composer/GESticker_beauty12/content.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/generalEffect.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/skin_detect.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/smooth.fsh
  • ttlive_beauty_composer/config.json
  • ttlive_composer.zip
    .zip
  • composer/Composer_new/content.json
  • composer/config.json
  • ttlive_gift_combo_wave.json
  • ttlive_reshape_composer.zip
    .zip
  • ttlive_smooth_local.zip
    .zip
  • upvote_comment_recommended.json
  • upvote_comment_reposted.json
  • upvote_recommend_guide.json
  • upvote_repost_guide.json
  • us.json
  • video_frag.sh
  • video_vertex.sh
  • vn.json
  • voice_search_recording_without_b64_image.json
  • voice_search_wait.json
  • welcome_screen_video4.mp4
  • with_did.json
  • with_uid.json
  • without_did.json

Android Permissions

TikTok v30.4.1 [Mod] arm8.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

com.google.android.gms.permission.AD_ID

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.BLUETOOTH

com.android.launcher.permission.READ_SETTINGS

android.permission.FOREGROUND_SERVICE

com.zhiliaoapp.musically.push.permission.MESSAGE

com.orange.update.permission.READ_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.tiktok.preload.permission.IDENTIFY

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

android.permission.SET_WALLPAPER

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_AUDIO

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.zhiliao.musically.livewallpaper.permission.wallpaperplugin

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH_CONNECT

android.permission.MODIFY_AUDIO_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.zhiliaoapp.musically.permission.RECEIVE_ADM_MESSAGE

com.amazon.device.messaging.permission.RECEIVE

android.permission.CHANGE_WIFI_MULTICAST_STATE