Errors

Reason
unexpected chunk type

General

  • Target

    TikTok_30.8.4_armv7a.apk

  • Size

    155.6MB

  • MD5

    642e54ce53f181c53969c4a178b0f593

  • SHA1

    73c1a4e642ca69b87906fe8c7b3b66df7326b848

  • SHA256

    71bf95cdbf2bb1f27c0e13e211cbd17b973025c2296887874ed0477dfe568e76

  • SHA512

    88a35ea1f96b7da0dd54ee3d092c2d9c8a6560580abd3d646df93bdff7ee64df2c52a998d778a46d84ec9116663a7b786e1181a3f8da03a9472cb9da6c508b5c

  • SSDEEP

    3145728:p6nNpNXFUJpx4HANIAZw4Lfy1ylUjGn3CgK/7BwB/vbrwPypO8:p6NT1QlmAZDl60ygY7gvbrDN

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 11 IoCs

Files

  • TikTok_30.8.4_armv7a.apk
    .apk android arch:arm

    com.zhiliaoapp.musically

    com.ss.android.ugc.aweme.i18n.musically.cut.AvatarChooseActivity


  • 10k_dark_web_filtered.txt
  • ArrowUp.json
  • CN_content_data_transmit_url.json
  • I18N_sys_emoji.json
  • MetadataProto_default
  • ProximaNova-Bold.otf
  • ProximaNova-Reg.otf
  • ProximaNova-Semibold.otf
  • Roboto-Regular.ttf
  • TikTok-Display-Bold.otf
  • TikTok-Display-Medium.otf
  • TikTok-Display-Regular.otf
  • TikTok-Text-Bold.otf
  • TikTok-Text-Medium.otf
  • TikTok-Text-Regular.otf
  • a-
  • ae.json
  • api_key.txt
  • auto_cut_button1_dark.json
  • autocut_01.json
  • autocut_icon_anim_1.json
  • autocut_icon_anim_2.json
  • autocut_icon_animation.json
  • av_ic_water_mark_16_9.png
    .png
  • av_ic_water_mark_9_16.png
    .png
  • aweme.json
  • b-
  • bar_frag.glsl
  • bar_vertex.glsl
  • baseline.prof
  • baseline.profm
  • bd.json
  • br.json
  • bubble_longpress2s.json
  • collect_cert_fact_detail.json
  • common_feed_anim_follow_people.json
  • common_feed_friends_tab_lottie_arrow_double_up.json
  • common_feed_photo_loading.json
  • countdown.json
  • countdown_10_lottie.json
  • countdown_3_lottie.json
  • de.json
  • dm_input_status_dark_mode.json
  • dm_input_status_normal_mode.json
  • dsl.json
  • duet_default_layout.zip
    .zip
  • GESticker_surface2/.DS_Store
  • GESticker_surface2/content.json
  • GESticker_surface2/generalEffect/.DS_Store
  • GESticker_surface2/generalEffect/Resource/.DS_Store
  • GESticker_surface2/generalEffect/Resource/matting.fsh
  • GESticker_surface2/generalEffect/Resource/normal.vsh
  • GESticker_surface2/generalEffect/generalEffect.json
  • __MACOSX/._GESticker_surface2
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GESticker_surface2/._.DS_Store
  • __MACOSX/GESticker_surface2/._content.json
  • __MACOSX/GESticker_surface2/._generalEffect
  • __MACOSX/GESticker_surface2/generalEffect/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/._Resource
  • __MACOSX/GESticker_surface2/generalEffect/._generalEffect.json
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._.DS_Store
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._matting.fsh
  • __MACOSX/GESticker_surface2/generalEffect/Resource/._normal.vsh
  • config.json
  • event.lua
    .js
  • duet_layout_drag_lottie_mt.json
  • dynamic_option_keys.json
  • ecommerceinfluencer_live_rank_list_living_line_animation.json
  • ecommercelive_shopping_bag_daily_anim.json
  • ecommercelive_shopping_cart_daily_anim.json
  • edit_photo_gesture_guide.webp
  • editor_pro_guide_pinch_in_gif.json
  • editor_pro_guide_trim_video_gif.json
  • editor_pro_magic_guide_lottie.json
  • editorproguide.json
  • effect_dice_lottie.json
  • ending_watermark_sonic_audio.aac
  • es.json
  • feed_ad_transform_btn_ctrl_lottie.json
  • feed_fill_favourite_add_lottie.json
  • feed_fill_favourite_cancel_lottie.json
  • feed_fill_like_add_lottie.json
  • feed_fill_like_cancel_lottie.json
  • feed_guide_hand_swip_lottie.json
  • feed_live_volume_icon_lottie.json
  • feed_live_volume_icon_lottie_s1.json
  • feed_long_press_lottie.json
  • feed_stroke_favourite_add_lottie.json
  • feed_stroke_favourite_cancel_lottie.json
  • feed_stroke_like_add_lottie.json
  • feed_stroke_like_cancel_lottie.json
  • finger_swipe_right_guide.json
  • finger_swipe_up_guide.json
  • fr.json
  • gb.json
  • gestures_swipe_left_tux_lottie.json
  • gestures_swipe_right_tux_lottie.json
  • hk
    .jar
  • home_swipe_up_lottie_android.json
  • hwdec.json
  • ic_bookmark_1.png
    .png
  • ic_bookmark_2.png
    .png
  • ic_bookmark_stoke_1.png
    .png
  • ic_home_like_after.png
    .png
  • ic_home_like_before.png
    .png
  • ic_like_fill_1_new.png
    .png
  • ic_like_fill_2_new.png
    .png
  • ic_like_stroke_1_new.png
    .png
  • ic_live_profile_paly.png
    .png
  • ic_live_profile_paly_background.png
    .png
  • icon_home_dislike_new.json
  • icon_home_favorite.json
  • icon_home_like_new.json
  • icon_live_room_flag.json
  • id.json
  • im_speech_input_listening.json
  • im_speech_input_waiting.json
  • im_suggested_reply_lottie_anime.json
  • img_0.png
    .png
  • img_1.png
    .png
  • img_2.png
    .png
  • img_3.png
    .png
  • img_4.png
    .png
  • img_5.png
    .png
  • img_6.png
    .png
  • img_7.png
    .png
  • in.json
  • interest_list_BR.json
  • interest_list_ID.json
  • interest_list_IN.json
  • interest_list_TH.json
  • interest_list_US.json
  • interest_list_VN.json
  • iq.json
  • it.json
  • jp
  • jp.json
  • jsb_whitelist.zip
    .zip
  • jsb_whitelist.json
  • kids_mode_allowlist.json
  • kids_ruler_config.json
  • lark_loading_icon.json
  • libhexagonAlg_skel.so
    .elf linux
  • like_reminder.json
  • like_reminder_bold.json
  • like_reminder_stroke.json
  • line.png
    .png
  • little_audio_wave_anim.json
  • loading.json
  • log_tea_dict.kv
  • log_tea_dict.txt
  • long_press_guide.json
  • lottie_double_points_loading.json
  • lottie_video_loading.json
  • lynx_canvas.js
    .js
  • lynx_core.js
    .js
  • mask_2x.png
    .png
  • mask_frag.sh
  • mask_vertex.sh
  • mention_and_hashtag.ttf
  • multiLanguge.dat
  • music_dsp_author_follow.json
  • musicrecognizing.json
  • musicsearch.json
  • musicwait.json
  • mx.json
  • my.json
  • na.czl
  • nd
    .elf linux x86
  • ng.json
  • nonblock_white_circle_load.json
  • omsdk_v1.js
    .js
  • other.json
  • pe.json
  • ph.json
  • ph_index
  • ph_raw
  • photo_search_loading_anim.json
  • pieces2.png
    .png
  • pipo_starling.json
  • pl.json
  • plugins.json
  • profile_live_font.png
    .png
  • reshape.zip
    .zip
  • AmazingFeature/content.json
  • AmazingFeature/lua/SystemScript.lua
  • AmazingFeature/main.scene
  • AmazingFeature/material/FaceDistortionV4Material0.material
  • AmazingFeature/material/single.material
  • AmazingFeature/rt/outputTex.rt
  • AmazingFeature/scene.config
  • AmazingFeature/sticker.config
  • AmazingFeature/xshader/Fdxshader.xshader
  • AmazingFeature/xshader/fdx.frag
  • AmazingFeature/xshader/fdx.vert
  • AmazingFeature/xshader/reshapeV4_single.frag
  • AmazingFeature/xshader/single_person.xshader
  • algorithmConfig.json
  • config.json
  • event.lua
    .js
  • right_pic.json
  • round.png
    .png
  • round2.png
    .png
  • round3.png
    .png
  • round4.png
    .png
  • ru.json
  • ruler_config.json
  • sa.json
  • search_LIVE_1color.json
  • search_check.json
  • search_swipe_up_lottie.json
  • share_navi_create_btn_animation_fallback.json
  • share_to_story.json
  • share_to_story_unify.json
  • shopping_car.png
    .png
  • slardar.properties
  • slardar_bridge.js
    .js
  • slardar_sdk.js
    .js
  • smooth.zip
    .zip
  • GeneralEffect/.DS_Store
  • GeneralEffect/content.json
  • GeneralEffect/generalEffect/.DS_Store
  • GeneralEffect/generalEffect/fshader_alpha_boxblur.fs
  • GeneralEffect/generalEffect/fshader_boxblur.fs
  • GeneralEffect/generalEffect/fshader_epm.fs
  • GeneralEffect/generalEffect/fshader_var.fs
  • GeneralEffect/generalEffect/generalEffect.json
  • GeneralEffect/generalEffect/vshader_boxblur.vs
  • GeneralEffect/generalEffect/vshader_epm.vs
  • __MACOSX/._GeneralEffect
  • __MACOSX/._config.json
  • __MACOSX/._event.lua
  • __MACOSX/GeneralEffect/._.DS_Store
  • __MACOSX/GeneralEffect/._content.json
  • __MACOSX/GeneralEffect/._generalEffect
  • __MACOSX/GeneralEffect/generalEffect/._.DS_Store
  • __MACOSX/GeneralEffect/generalEffect/._fshader_alpha_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_boxblur.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_epm.fs
  • __MACOSX/GeneralEffect/generalEffect/._fshader_var.fs
  • __MACOSX/GeneralEffect/generalEffect/._generalEffect.json
  • __MACOSX/GeneralEffect/generalEffect/._vshader_boxblur.vs
  • __MACOSX/GeneralEffect/generalEffect/._vshader_epm.vs
  • config.json
  • event.lua
    .js
  • snapboost_list.txt
  • snapboost_list_coldboot_top400.txt
  • snapboost_list_detail_enter.txt
  • snapboost_list_ecommerce.txt
  • snapboost_list_ecommerce_pdp.txt
  • snapboost_list_newuser_top200.txt
  • snapboost_list_newuser_top400.txt
  • snapboost_list_newuser_top600.txt
  • snapboost_list_profile_enter.txt
  • snapboost_list_search.txt
  • ss.properties
  • star2.png
    .png
  • star3.png
    .png
  • star_lottie.json
  • stickpoint_switch_music_loading.json
  • story_breathing_ring_lottie.json
  • story_upload_loading_yellow_lottie.json
  • swipe-left.json
  • swipe-right.json
  • tablet_horizontal_guide.json
  • tablet_horizontal_guide2.json
  • tag_profile_live.json
  • textmode_bg.png
    .png
  • textmode_main.png
    .png
  • th.json
  • tool_editorpro_btn_tux_lottie.json
  • tool_editorpro_btn_tux_lottie_dark.json
  • tool_recording_dark_lottie.json
  • topic_interest_list_US.json
  • tr.json
  • trans_btm_frag.glsl
  • tt_double_tap_like_lottie.json
  • tt_face_attribute_age_v2.0.model
  • tt_face_extra_v14.0.model
  • tt_face_v11.1.model
  • tt_feed_like_cancel.json
  • tt_feed_like_tap.json
  • ttlive_anim_boost_card.json
  • ttlive_base_gift_combo_font.ttf
  • ttlive_composer.zip
    .zip
  • composer/Composer_new/content.json
  • composer/config.json
  • ttlive_gift_combo_wave.json
  • ttlive_smooth_local.zip
    .zip
  • ttlive_smooth_local/AmazingFeature/content.json
  • ttlive_smooth_local/AmazingFeature/lua/SmoothV6.lua
  • ttlive_smooth_local/AmazingFeature/main.scene
  • ttlive_smooth_local/AmazingFeature/material/box1.material
  • ttlive_smooth_local/AmazingFeature/material/box2.material
  • ttlive_smooth_local/AmazingFeature/material/box3.material
  • ttlive_smooth_local/AmazingFeature/material/smooth.material
  • ttlive_smooth_local/AmazingFeature/material/var.material
  • ttlive_smooth_local/AmazingFeature/rt/box1RT.rt
  • ttlive_smooth_local/AmazingFeature/rt/outputTex.rt
  • ttlive_smooth_local/AmazingFeature/rt/varRT.rt
  • ttlive_smooth_local/AmazingFeature/scene.config
  • ttlive_smooth_local/AmazingFeature/sticker.config
  • ttlive_smooth_local/AmazingFeature/xshader/box1.frag
  • ttlive_smooth_local/AmazingFeature/xshader/box1.vert
  • ttlive_smooth_local/AmazingFeature/xshader/box1.xshader
  • ttlive_smooth_local/AmazingFeature/xshader/box2.frag
  • ttlive_smooth_local/AmazingFeature/xshader/box2.vert
  • ttlive_smooth_local/AmazingFeature/xshader/box2.xshader
  • ttlive_smooth_local/AmazingFeature/xshader/box3.frag
  • ttlive_smooth_local/AmazingFeature/xshader/box3.vert
  • ttlive_smooth_local/AmazingFeature/xshader/box3.xshader
  • ttlive_smooth_local/AmazingFeature/xshader/smooth.frag
  • ttlive_smooth_local/AmazingFeature/xshader/smooth.vert
  • ttlive_smooth_local/AmazingFeature/xshader/smooth.xshader
  • ttlive_smooth_local/AmazingFeature/xshader/var.frag
  • ttlive_smooth_local/AmazingFeature/xshader/var.vert
  • ttlive_smooth_local/AmazingFeature/xshader/var.xshader
  • ttlive_smooth_local/config.json
  • upvote_comment_recommended.json
  • upvote_comment_reposted.json
  • upvote_recommend_guide.json
  • upvote_repost_guide.json
  • us.json
  • video_frag.sh
  • video_vertex.sh
  • vn.json
  • voice_search_recording_without_b64_image.json
  • voice_search_wait.json
  • welcome_screen_video4.mp4
  • with_did.json
  • with_uid.json
  • without_did.json

Android Permissions

TikTok_30.8.4_armv7a.apk

Permissions

com.google.android.gms.permission.AD_ID

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.ACCESS_WIFI_STATE

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.FLASHLIGHT

android.permission.WAKE_LOCK

android.permission.READ_CONTACTS

android.permission.VIBRATE

android.permission.BLUETOOTH

com.android.launcher.permission.READ_SETTINGS

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.READ_MEDIA_IMAGES

android.permission.READ_MEDIA_VIDEO

com.orange.update.permission.READ_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.tiktok.preload.permission.IDENTIFY

android.permission.READ_MEDIA_AUDIO

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.zhiliao.musically.livewallpaper.permission.wallpaperplugin

android.permission.CHANGE_NETWORK_STATE

android.permission.BLUETOOTH_CONNECT

android.permission.MODIFY_AUDIO_SETTINGS

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.zhiliaoapp.musically.permission.RECEIVE_ADM_MESSAGE

com.amazon.device.messaging.permission.RECEIVE

com.android.vending.BILLING

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_MULTICAST_STATE