Errors

Reason
unexpected chunk type

General

  • Target

    TikTok-Premium-28.3.4.apk

  • Size

    208.6MB

  • MD5

    1ffbd65fa9b43724c66464eb749df420

  • SHA1

    278243bc046b9aa29211c4533186bfb4f38a5459

  • SHA256

    c818fac81dc4b90ea4e6dd61967edeef06b09d45eb574e6b5b59dcaa513835d9

  • SHA512

    36d573ba1de23810bdab94fce3a0a1b2e166f2ac9514c68035c3abe74d808e434d9831ecf0377ff624c04b3642326b5a2d2f7ca142ef725be09b8bbeb9807a0d

  • SSDEEP

    3145728:eAPvX1yUh3aa8O2LUezB3w+XsaVN9iNTHQGsxj5uNA+zWbCjZsO4Yn9kAH+:iaD+wBaX9GTwhxLBqdxn9kAH+

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 9 IoCs

Files

  • TikTok-Premium-28.3.4.apk
    .apk android arch:arm64 arch:arm

    com.zhiliaoapp.musically

    com.ss.android.ugc.aweme.i18n.musically.cut.AvatarChooseActivity


  • 10k_dark_web_filtered.txt
  • AkzidenzGrotesk-BoldCondAlt.otf
  • ArrowUp.json
  • BalsamiqSans-Bold.ttf
  • BalsamiqSans-Reg.ttf
  • BalsamiqSans-Semibold.ttf
  • I18N_sys_emoji.json
  • ProximaNova-Bold.otf
  • ProximaNova-Reg.otf
  • ProximaNova-Semibold.otf
  • ProximaSoft-Bold.ttf
  • ProximaSoft-Reg.ttf
  • ProximaSoft-Semibold.ttf
  • Roboto-Bold.ttf
  • Roboto-Reg.ttf
  • Roboto-Semibold.ttf
  • SanFrancisco-Bold.ttf
  • SanFrancisco-Reg.ttf
  • SanFrancisco-Semibold.ttf
  • __env_web__.zip
    .zip
  • __dev__/basebundlecheck
  • __dev__/jssdkcheck.json
  • __dev__/main-frame.js
    .js
  • __dev__/tmg-core.js
    .js
  • __dev__/webp-hook.js
    .js
  • a-
  • ae.json
  • api_key.txt
  • autocut_icon_anim_1.json
  • autocut_icon_anim_2.json
  • autocut_icon_animation.json
  • av_ic_water_mark_16_9.png
    .png
  • av_ic_water_mark_9_16.png
    .png
  • aweme.json
  • b-
  • baseline.prof
  • baseline.profm
  • bd.json
  • br.json
  • bubble_longpress2s.json
  • common_feed_anim_follow_people.json
  • common_feed_friends_tab_lottie_arrow_double_up.json
  • common_feed_photo_loading.json
  • countdown.json
  • countdown_10_lottie.json
  • countdown_3_lottie.json
  • de.json
  • dsl.json
  • duet_default_layout.zip
    .zip
  • GESticker_surface2/.DS_Store
  • GESticker_surface2/content.json
  • GESticker_surface2/generalEffect/.DS_Store
  • GESticker_surface2/generalEffect/Resource/.DS_Store
  • GESticker_surface2/generalEffect/Resource/matting.fsh
  • GESticker_surface2/generalEffect/Resource/normal.vsh
  • GESticker_surface2/generalEffect/generalEffect.json
  • __MACOSX/._GESticker_surface2
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GESticker_surface2/._.DS_Store
  • __MACOSX/GESticker_surface2/._content.json
  • __MACOSX/GESticker_surface2/._generalEffect
  • __MACOSX/GESticker_surface2/generalEffect/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/._Resource
  • __MACOSX/GESticker_surface2/generalEffect/._generalEffect.json
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._matting.fsh
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._normal.vsh
  • config.json
  • event.lua
    .js
  • duet_layout_drag_lottie_mt.json
  • dynamic_option_keys.json
  • ecommercelive_shopping_bag_daily_anim.json
  • edit_photo_gesture_guide.webp
  • editorproguide.json
  • ending_watermark_sonic_audio.aac
  • es.json
  • feed_ad_transform_btn_ctrl_lottie.json
  • feed_fill_favourite_add_lottie.json
  • feed_fill_favourite_cancel_lottie.json
  • feed_fill_like_add_lottie.json
  • feed_fill_like_cancel_lottie.json
  • feed_guide_hand_swip_lottie.json
  • feed_live_volume_icon_lottie.json
  • feed_live_volume_icon_lottie_black.json
  • feed_live_volume_icon_lottie_s1.json
  • feed_long_press_lottie.json
  • feed_stroke_favourite_add_lottie.json
  • feed_stroke_favourite_cancel_lottie.json
  • feed_stroke_like_add_lottie.json
  • feed_stroke_like_cancel_lottie.json
  • finger_swipe_right_guide.json
  • finger_swipe_up_guide.json
  • fr.json
  • gb.json
  • home_swipe_up_lottie_android.json
  • hwdec.json
  • ic_bookmark_1.png
    .png
  • ic_bookmark_2.png
    .png
  • ic_bookmark_stoke_1.png
    .png
  • ic_home_like_after.png
    .png
  • ic_home_like_before.png
    .png
  • ic_like_fill_1_new.png
    .png
  • ic_like_fill_2_new.png
    .png
  • ic_like_stroke_1_new.png
    .png
  • ic_live_profile_paly.png
    .png
  • ic_live_profile_paly_background.png
    .png
  • icon_home_dislike_new.json
  • icon_home_favorite.json
  • icon_home_like_new.json
  • icon_live_room_flag.json
  • id.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • in.json
  • interest_list_BR.json
  • interest_list_ID.json
  • interest_list_IN.json
  • interest_list_TH.json
  • interest_list_US.json
  • interest_list_VN.json
  • iq.json
  • it.json
  • jp.json
  • jsb_whitelist.zip
    .zip
  • jsb_whitelist.json
  • kids_mode_allowlist.json
  • kids_ruler_config.json
  • lark_loading_icon.json
  • line.png
    .png
  • little_audio_wave_anim.json
  • lottie_double_points_loading.json
  • lottie_video_loading.json
  • lynx_core.js
    .js
  • mask_2x.png
    .png
  • mask_frag.sh
  • mask_vertex.sh
  • mention_and_hashtag.ttf
  • metadata.txt
  • music_dsp_author_follow.json
  • mx.json
  • my.json
  • na.czl
  • nd
    .elf linux x86
  • ng.json
  • omsdk_v1.js
    .js
  • other.json
  • pe.json
  • ph.json
  • ph_index
  • ph_raw
  • pipo_starling.json
  • pl.json
  • plugins.json
  • poi_sticker_iconfont.ttf
  • profile_live_font.png
    .png
  • reshape.zip
    .zip
  • __MACOSX/._config.json
  • __MACOSX/._distortionFaceu_test
  • __MACOSX/._event.lua
  • __MACOSX/distortionFaceu_test/._.DS_Store
  • __MACOSX/distortionFaceu_test/._content.json
  • __MACOSX/distortionFaceu_test/._represent_Plasticine.txt
  • __MACOSX/distortionFaceu_test/._represent_Plasticine_organs.txt
  • config.json
  • distortionFaceu_test/.DS_Store
  • distortionFaceu_test/content.json
  • distortionFaceu_test/represent_Plasticine.txt
  • distortionFaceu_test/represent_Plasticine_organs.txt
  • event.lua
    .js
  • right_pic.json
  • ru.json
  • ruler_config.json
  • sa.json
  • sdk_cert_fact_detail.json
  • search_LIVE_1color.json
  • search_check.json
  • search_long_press_guide.json
  • share_navi_create_btn_animation_fallback.json
  • share_to_story.json
  • share_to_story_unify.json
  • slardar.properties
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • smooth.zip
    .zip
  • GeneralEffect/.DS_Store
  • GeneralEffect/content.json
  • GeneralEffect/generalEffect/.DS_Store
  • GeneralEffect/generalEffect/fshader_alpha_boxblur.fs
  • GeneralEffect/generalEffect/fshader_boxblur.fs
  • GeneralEffect/generalEffect/fshader_epm.fs
  • GeneralEffect/generalEffect/fshader_var.fs
  • GeneralEffect/generalEffect/generalEffect.json
  • GeneralEffect/generalEffect/vshader_boxblur.vs
  • GeneralEffect/generalEffect/vshader_epm.vs
  • __MACOSX/._GeneralEffect
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GeneralEffect/._.DS_Store
  • __MACOSX/GeneralEffect/._content.json
  • __MACOSX/GeneralEffect/._generalEffect
  • __MACOSX/GeneralEffect/generalEffect/._.DS_Store
  • __MACOSX/GeneralEffect/generalEffect/._fshader_alpha_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_epm.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_var.fs
  • __MACOSX/GeneralEffect/generalEffect/._generalEffect.json
  • __MACOSX/GeneralEffect/generalEffect/._vshader_boxblur.vs
  • __MACOSX/GeneralEffect/generalEffect/._vshader_epm.vs
  • config.json
  • event.lua
    .js
  • snapboost_list.txt
  • snapboost_list_coldboot_top400.txt
  • snapboost_list_ecommerce.txt
  • snapboost_list_newuser_top200.txt
  • snapboost_list_newuser_top400.txt
  • snapboost_list_newuser_top600.txt
  • snapboost_list_second_page.txt
  • ss.properties
  • star_lottie.json
  • stickpoint_switch_music_loading.json
  • story_breathing_ring_lottie.json
  • story_upload_loading_yellow_lottie.json
  • survey.json
  • survey_blue_circle.png
    .png
  • survey_blue_group.png
    .png
  • survey_glow01.png
    .png
  • survey_glow02.png
    .png
  • survey_red_circle.png
    .png
  • survey_red_group.png
    .png
  • tablet_horizontal_guide.json
  • tablet_horizontal_guide2.json
  • tag_profile_live.json
  • textmode_bg.png
    .png
  • textmode_main.png
    .png
  • th.json
  • tool_recording_dark_lottie.json
  • topic_interest_list_US.json
  • tr.json
  • tt_double_tap_like_lottie.json
  • tt_face_attribute_age_v2.0.model
  • tt_face_extra_v14.0.model
  • tt_face_v11.1.model
  • tt_feed_like_cancel.json
  • tt_feed_like_tap.json
  • ttlive_FaceReshape_V2.zip
    .zip
  • FaceReshape_V2/config.json
  • FaceReshape_V2/distortion.json
  • ttlive_Live_Beauty_12.zip
    .zip
  • Live_Beauty_12/.DS_Store
  • Live_Beauty_12/beauty.json
  • Live_Beauty_12/beauty/.DS_Store
  • ttlive_anim_boost_card.json
  • ttlive_base_gift_combo_font.ttf
  • ttlive_beauty_composer.zip
    .zip
  • __MACOSX/._ttlive_beauty_composer
  • __MACOSX/ttlive_beauty_composer/._.DS_Store
  • __MACOSX/ttlive_beauty_composer/._GESticker_beauty12
  • __MACOSX/ttlive_beauty_composer/._config.json
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/._.DS_Store
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/._content.json
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/._generalEffect
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/._.DS_Store
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/._generalEffect.json
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/._resource1
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._.DS_Store
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._blur.fsh
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._blur.vsh
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._copy.fsh
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._copy.vsh
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._skin_detect.fsh
  • __MACOSX/ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/._smooth.fsh
  • ttlive_beauty_composer/.DS_Store
  • ttlive_beauty_composer/GESticker_beauty12/.DS_Store
  • ttlive_beauty_composer/GESticker_beauty12/content.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/.DS_Store
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/generalEffect.json
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/.DS_Store
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/blur.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/copy.vsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/skin_detect.fsh
  • ttlive_beauty_composer/GESticker_beauty12/generalEffect/resource1/smooth.fsh
  • ttlive_beauty_composer/config.json
  • ttlive_composer.zip
    .zip
  • ttlive_gift_combo_wave.json
  • ttlive_reshape_composer.zip
    .zip
  • ttlive_smooth_local.zip
    .zip
  • upvote_comment_recommended.json
  • upvote_comment_reposted.json
  • upvote_recommend_guide.json
  • upvote_repost_guide.json
  • us.json
  • video_frag.sh
  • video_vertex.sh
  • vn.json
  • voice_search_bouncing_mic.json
  • voice_search_recording_without_b64_image.json
  • voice_search_wait.json
  • welcome_screen_video4.mp4
  • with_did.json
  • with_uid.json
  • without_did.json

Android Permissions

TikTok-Premium-28.3.4.apk

Permissions

android.permission.ACCESS_COARSE_LOCATION

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.GET_TASKS

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.BLUETOOTH

com.meizu.c2dm.permission.RECEIVE

com.zhiliaoapp.musically.permission.READ_ACCOUNT

com.zhiliaoapp.musically.permission.WRITE_ACCOUNT

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.READ_SETTINGS

android.permission.READ_CALENDAR

android.permission.WRITE_CALENDAR

android.permission.AUTHENTICATE_ACCOUNTS

com.htc.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

com.huawei.launcher3.permission.READ_SETTINGS

com.huawei.launcher3.permission.WRITE_SETTINGS

com.huawei.launcher2.permission.READ_SETTINGS

com.huawei.launcher2.permission.WRITE_SETTINGS

com.ebproductions.android.launcher.permission.READ_SETTINGS

com.ebproductions.android.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

dianxin.permission.ACCESS_LAUNCHER_DATA

com.miui.mihome2.permission.READ_SETTINGS

com.miui.mihome2.permission.WRITE_SETTINGS

android.permission.FOREGROUND_SERVICE

com.zhiliaoapp.musically.permission.MIPUSH_RECEIVE

com.zhiliaoapp.musically.push.permission.MESSAGE

com.orange.update.permission.READ_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.tiktok.preload.permission.IDENTIFY

android.permission.SET_WALLPAPER

android.permission.SCHEDULE_EXACT_ALARM

com.sec.android.provider.badge.permission.READ