Overview

overview

10

Static

static

10

TikTok18.apk

android-13-x64

10

TikTok18.apk

android-15-x64

10

Resubmissions

01/07/2026, 22:29

260701-2edbaafv6l10

13/02/2026, 12:11

260213-pcltesdw9g10

Sharing

Copy URL Twitter E-mail

General

  • Target
    TikTok18.apk
  • Size 8.9MB
  • Sample260701-2edbaafv6l
  • SHA256 51863351193ab67148e3e47255cad4927eb13939292c7854121ebedb4de28590
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
fantasyhubandroidbankercollectioncredential_accessdefense_evasiondiscoveryimpactinfostealerrattrojan

Malware Config

Targets

    • Target
      TikTok18.apk
    • Size 8.9MB
    • SHA256 51863351193ab67148e3e47255cad4927eb13939292c7854121ebedb4de28590
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    bankercollectioncredential_accessdiscoveryfantasyhubimpactinfostealerrattrojandefense_evasion

    • Family: FantasyHub

      FantasyHub is an Android RAT first seen in November 2025.

      trojaninfostealerratfantasyhub

    • FantasyHub payload

    • Checks Android system properties for emulator presence.

      defense_evasion

    • Obtains sensitive information copied to the device clipboard

      Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

      collectioncredential_accessimpact

    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

      bankerdiscovery

    • Declares services with permission to bind to the system

    • Requests dangerous framework permissions

    behavioral1behavioral2

MITRE ATT&CK Mobile v16

Tasks