Errors

Reason
unexpected chunk type

General

  • Target

    TikTok_v30.8.4_mod_modder.me.apk

  • Size

    167.9MB

  • MD5

    d308d7357fb1a09ecebea6c8d5ca3b90

  • SHA1

    4979ecb0e7390bf2af5ead2404a96133531bf207

  • SHA256

    a8832096e57ffc6741db0f7d7b0a07638fa318577c815774124ff3d42acf52c2

  • SHA512

    54366e44c10278434b32abb450ceb98c40d7b9b07267ff154b1a2c6d6ba748766bbc391661a2937395e65b263e1d21bd2d93bdee0c4ab088cae1c8b923800519

  • SSDEEP

    3145728:Euj9mF4YQun5ddCuvTLeF2GJOcOwv/KMJyG4UPDQAG:Euj9m4LuCurLy2GJOxYFy+DQAG

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 7 IoCs

Files

  • TikTok_v30.8.4_mod_modder.me.apk
    .apk android arch:arm

    com.zhiliaoapp.musically

    com.ss.android.ugc.aweme.i18n.musically.cut.AvatarChooseActivity


  • 10k_dark_web_filtered.txt
  • AkzidenzGrotesk-BoldCondAlt.otf
  • ArrowUp.json
  • BalsamiqSans-Bold.ttf
  • BalsamiqSans-Reg.ttf
  • BalsamiqSans-Semibold.ttf
  • CN_content_data_transmit_url.json
  • I18N_sys_emoji.json
  • ProximaNova-Bold.otf
  • ProximaNova-Reg.otf
  • ProximaNova-Semibold.otf
  • ProximaSoft-Bold.ttf
  • ProximaSoft-Reg.ttf
  • ProximaSoft-Semibold.ttf
  • Roboto-Bold-Modified.ttf
  • Roboto-Bold.ttf
  • Roboto-Medium-Modified.ttf
  • Roboto-Reg.ttf
  • Roboto-Regular-Modified.ttf
  • Roboto-Regular.ttf
  • Roboto-Semibold.ttf
  • SanFrancisco-Bold.ttf
  • SanFrancisco-Reg.ttf
  • SanFrancisco-Semibold.ttf
  • TikTok-Display-Bold.otf
  • TikTok-Display-Medium.otf
  • TikTok-Display-Regular.otf
  • TikTok-Text-Bold.otf
  • TikTok-Text-Medium.otf
  • TikTok-Text-Regular.otf
  • __env_web__.zip
    .zip
  • __dev__/basebundlecheck
  • __dev__/jssdkcheck.json
  • __dev__/main-frame.js
    .js
  • __dev__/tmg-core.js
    .js
  • __dev__/webp-hook.js
    .js
  • a-
  • ae.json
  • api_key.txt
  • autocut_01.json
  • autocut_icon_anim_1.json
  • autocut_icon_anim_2.json
  • autocut_icon_animation.json
  • av_ic_water_mark_16_9.png
    .png
  • av_ic_water_mark_9_16.png
    .png
  • aweme.json
  • b-
  • bar_frag.glsl
  • bar_vertex.glsl
  • baseline.prof
  • baseline.profm
  • bd.json
  • br.json
  • bubble_longpress2s.json
  • collect_cert_fact_detail.json
  • common_feed_anim_follow_people.json
  • common_feed_friends_tab_lottie_arrow_double_up.json
  • common_feed_photo_loading.json
  • countdown.json
  • countdown_10_lottie.json
  • countdown_3_lottie.json
  • de.json
  • dm_input_status_dark_mode.json
  • dm_input_status_normal_mode.json
  • dsl.json
  • duet_default_layout.zip
    .zip
  • GESticker_surface2/.DS_Store
  • GESticker_surface2/content.json
  • GESticker_surface2/generalEffect/.DS_Store
  • GESticker_surface2/generalEffect/Resource/.DS_Store
  • GESticker_surface2/generalEffect/Resource/matting.fsh
  • GESticker_surface2/generalEffect/Resource/normal.vsh
  • GESticker_surface2/generalEffect/generalEffect.json
  • __MACOSX/._GESticker_surface2
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GESticker_surface2/._.DS_Store
  • __MACOSX/GESticker_surface2/._content.json
  • __MACOSX/GESticker_surface2/._generalEffect
  • __MACOSX/GESticker_surface2/generalEffect/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/._Resource
  • __MACOSX/GESticker_surface2/generalEffect/._generalEffect.json
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._matting.fsh
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._normal.vsh
  • config.json
  • event.lua
    .js
  • duet_layout_drag_lottie_mt.json
  • dynamic_option_keys.json
  • ecommerceinfluencer_live_rank_list_living_line_animation.json
  • ecommercelive_shopping_bag_daily_anim.json
  • ecommercelive_shopping_cart_daily_anim.json
  • edit_photo_gesture_guide.webp
  • editor_pro_guide_pinch_in_gif.json
  • editor_pro_guide_trim_video_gif.json
  • editorproguide.json
  • ending_watermark_sonic_audio.aac
  • es.json
  • feed_ad_transform_btn_ctrl_lottie.json
  • feed_fill_favourite_add_lottie.json
  • feed_fill_favourite_cancel_lottie.json
  • feed_fill_like_add_lottie.json
  • feed_fill_like_cancel_lottie.json
  • feed_guide_hand_swip_lottie.json
  • feed_live_volume_icon_lottie.json
  • feed_live_volume_icon_lottie_black.json
  • feed_live_volume_icon_lottie_s1.json
  • feed_long_press_lottie.json
  • feed_stroke_favourite_add_lottie.json
  • feed_stroke_favourite_cancel_lottie.json
  • feed_stroke_like_add_lottie.json
  • feed_stroke_like_cancel_lottie.json
  • finger_swipe_right_guide.json
  • finger_swipe_up_guide.json
  • fr.json
  • gb.json
  • home_swipe_up_lottie_android.json
  • hwdec.json
  • ic_bookmark_1.png
    .png
  • ic_bookmark_2.png
    .png
  • ic_bookmark_stoke_1.png
    .png
  • ic_home_like_after.png
    .png
  • ic_home_like_before.png
    .png
  • ic_like_fill_1_new.png
    .png
  • ic_like_fill_2_new.png
    .png
  • ic_like_stroke_1_new.png
    .png
  • ic_live_profile_paly.png
    .png
  • ic_live_profile_paly_background.png
    .png
  • icon_home_dislike_new.json
  • icon_home_favorite.json
  • icon_home_like_new.json
  • icon_live_room_flag.json
  • id.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • in.json
  • interest_list_BR.json
  • interest_list_ID.json
  • interest_list_IN.json
  • interest_list_TH.json
  • interest_list_US.json
  • interest_list_VN.json
  • iq.json
  • it.json
  • jp.json
  • jsb_whitelist.zip
    .zip
  • jsb_whitelist.json
  • kids_mode_allowlist.json
  • kids_ruler_config.json
  • lark_loading_icon.json
  • like_reminder.json
  • like_reminder_bold.json
  • like_reminder_stroke.json
  • line.png
    .png
  • little_audio_wave_anim.json
  • loading.json
  • log_tea_dict.kv
  • log_tea_dict.txt
  • lottie_double_points_loading.json
  • lottie_video_loading.json
  • lynx_core.js
    .js
  • mask_2x.png
    .png
  • mask_frag.sh
  • mask_vertex.sh
  • mention_and_hashtag.ttf
  • metadata.txt
  • music_dsp_author_follow.json
  • mx.json
  • my.json
  • na.czl
  • nd
    .elf linux x86
  • ng.json
  • nonblock_white_circle_load.json
  • omsdk_v1.js
    .js
  • other.json
  • pe.json
  • ph.json
  • ph_index
  • ph_raw
  • pieces2.png
    .png
  • pipo_starling.json
  • pl.json
  • plugins.json
  • poi_sticker_iconfont.ttf
  • profile_live_font.png
    .png
  • reshape.zip
    .zip
  • __MACOSX/._config.json
  • __MACOSX/._distortionFaceu_test
  • __MACOSX/._event.lua
  • __MACOSX/distortionFaceu_test/._.DS_Store
  • __MACOSX/distortionFaceu_test/._content.json
  • __MACOSX/distortionFaceu_test/._represent_Plasticine.txt
  • __MACOSX/distortionFaceu_test/._represent_Plasticine_organs.txt
  • config.json
  • distortionFaceu_test/.DS_Store
  • distortionFaceu_test/content.json
  • distortionFaceu_test/represent_Plasticine.txt
  • distortionFaceu_test/represent_Plasticine_organs.txt
  • event.lua
    .js
  • right_pic.json
  • round.png
    .png
  • round2.png
    .png
  • round3.png
    .png
  • round4.png
    .png
  • ru.json
  • ruler_config.json
  • sa.json
  • search_LIVE_1color.json
  • search_check.json
  • share_navi_create_btn_animation_fallback.json
  • share_to_story.json
  • share_to_story_unify.json
  • shopping_car.png
    .png
  • slardar.properties
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • smooth.zip
    .zip
  • GeneralEffect/.DS_Store
  • GeneralEffect/content.json
  • GeneralEffect/generalEffect/.DS_Store
  • GeneralEffect/generalEffect/fshader_alpha_boxblur.fs
  • GeneralEffect/generalEffect/fshader_boxblur.fs
  • GeneralEffect/generalEffect/fshader_epm.fs
  • GeneralEffect/generalEffect/fshader_var.fs
  • GeneralEffect/generalEffect/generalEffect.json
  • GeneralEffect/generalEffect/vshader_boxblur.vs
  • GeneralEffect/generalEffect/vshader_epm.vs
  • __MACOSX/._GeneralEffect
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GeneralEffect/._.DS_Store
  • __MACOSX/GeneralEffect/._content.json
  • __MACOSX/GeneralEffect/._generalEffect
  • __MACOSX/GeneralEffect/generalEffect/._.DS_Store
  • __MACOSX/GeneralEffect/generalEffect/._fshader_alpha_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_epm.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_var.fs
  • __MACOSX/GeneralEffect/generalEffect/._generalEffect.json
  • __MACOSX/GeneralEffect/generalEffect/._vshader_boxblur.vs
  • __MACOSX/GeneralEffect/generalEffect/._vshader_epm.vs
  • config.json
  • event.lua
    .js
  • snapboost_list.txt
  • snapboost_list_coldboot_top400.txt
  • snapboost_list_ecommerce.txt
  • snapboost_list_newuser_top200.txt
  • snapboost_list_newuser_top400.txt
  • snapboost_list_newuser_top600.txt
  • snapboost_list_second_page.txt
  • ss.properties
  • star2.png
    .png
  • star3.png
    .png
  • star_lottie.json
  • stickpoint_switch_music_loading.json
  • story_breathing_ring_lottie.json
  • story_upload_loading_yellow_lottie.json
  • swipe-left.json
  • swipe-right.json
  • tablet_horizontal_guide.json
  • tablet_horizontal_guide2.json
  • tag_profile_live.json
  • textmode_bg.png
    .png
  • textmode_main.png
    .png
  • th.json
  • tool_recording_dark_lottie.json
  • topic_interest_list_US.json
  • tr.json
  • trans_btm_frag.glsl
  • tt_double_tap_like_lottie.json
  • tt_face_attribute_age_v2.0.model
  • tt_face_extra_v14.0.model
  • tt_face_v11.1.model
  • tt_feed_like_cancel.json
  • tt_feed_like_tap.json
  • ttlive_FaceReshape_V2.zip
    .zip
  • FaceReshape_V2/config.json
  • FaceReshape_V2/distortion.json
  • ttlive_Live_Beauty_12.zip
    .zip
  • Live_Beauty_12/beauty.json
  • ttlive_anim_boost_card.json
  • ttlive_base_gift_combo_font.ttf
  • ttlive_beauty_composer.zip
    .zip
  • ttlive_beauty_composer/GESticker_beauty12/content.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/generalEffect.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/skin_detect.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/smooth.fsh
  • ttlive_beauty_composer/config.json
  • ttlive_composer.zip
    .zip
  • ttlive_gift_combo_wave.json
  • ttlive_reshape_composer.zip
    .zip
  • ttlive_smooth_local.zip
    .zip
  • upvote_comment_recommended.json
  • upvote_comment_reposted.json
  • upvote_recommend_guide.json
  • upvote_repost_guide.json
  • us.json
  • video_frag.sh
  • video_vertex.sh
  • vn.json
  • voice_search_recording_without_b64_image.json
  • voice_search_wait.json
  • welcome_screen_video4.mp4
  • with_did.json
  • with_uid.json
  • without_did.json

Android Permissions

TikTok_v30.8.4_mod_modder.me.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.BLUETOOTH

com.zhiliaoapp.musically.permission.READ_ACCOUNT

com.zhiliaoapp.musically.permission.WRITE_ACCOUNT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.FOREGROUND_SERVICE

com.zhiliaoapp.musically.push.permission.MESSAGE

android.permission.SET_WALLPAPER

com.orange.update.permission.READ_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.tiktok.preload.permission.IDENTIFY

android.permission.SCHEDULE_EXACT_ALARM

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.zhiliao.musically.livewallpaper.permission.wallpaperplugin

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH_CONNECT

android.permission.MODIFY_AUDIO_SETTINGS

com.vivo.aiengine.permission.READ_AWARE_PROVIDER

com.vivo.aiengine.permission.WRITE_AWARE_PROVIDER

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.zhiliaoapp.musically.permission.RECEIVE_ADM_MESSAGE

com.amazon.device.messaging.permission.RECEIVE

android.permission.CHANGE_WIFI_MULTICAST_STATE