059290e2fc63ede6c52b3d3321d1b83315fee00824763210ca0d3319c612417a

General

Target
TikTok18+.apk
Size 33.7MB
Sample260710-gap43adx7q
SHA256 059290e2fc63ede6c52b3d3321d1b83315fee00824763210ca0d3319c612417a
MD5 cebea7e42d4d6a9a7d0623f1054e30f7
SHA1 36638cb9cf58e629223856a3ec1c1312100e0412
SHA512 21c7d31a9f92c11db3d4cec184b876cde809687d839906a8d9a184e6caaaf432cc52b744588a506dccbebf19283038a82779c467e41ea645413b2cde715b4864
SSDEEP 786432:UNHlqX7/y6AFsKKRS/3SIjmgEd8D7ODKkmd:UNHlqLK60sKK0xmno7ODKkmd
TLSH
T11677230AEBC87E2BC5F74236293955244C470C45478BDA82ED8A792C6C776E1FB1DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  TikTok18+.apk
- Size 33.7MB
- SHA256 059290e2fc63ede6c52b3d3321d1b83315fee00824763210ca0d3319c612417a
- MD5 cebea7e42d4d6a9a7d0623f1054e30f7
- SHA1 36638cb9cf58e629223856a3ec1c1312100e0412
- SHA512 21c7d31a9f92c11db3d4cec184b876cde809687d839906a8d9a184e6caaaf432cc52b744588a506dccbebf19283038a82779c467e41ea645413b2cde715b4864
- SSDEEP 786432:UNHlqX7/y6AFsKKRS/3SIjmgEd8D7ODKkmd:UNHlqLK60sKK0xmno7ODKkmd
- TLSH
  T11677230AEBC87E2BC5F74236293955244C470C45478BDA82ED8A792C6C776E1FB1DBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access evasion impact
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
behavioral1
- Target
  payload.base
- Size 13.1MB
- SHA256 80521da70a66581ad9f5f4d8db4f99fa14025b039942dff5f5b4741426048896
- MD5 cc451dc1c492252545d4dc1765aebb43
- SHA1 1a4d7c8e85d860a35e3f3374c7f583c6cd2fd537
- SHA512 2914b725d9a5be723df176a7dc93f141529b9ab56963f92ba9b0899e7b9bb4ddd7f10a72fc0ba7be1d5dd40d9b352da6279a1d08d55509d825c95ffeb3c4ad00
- SSDEEP 393216:zYB8tkYB8tfliP8pYb26YB8tNYB8tRx868wRYB8t90:MSEQP8P3VlQmJ
- TLSH
  T119D6020AEFC8BA2BC5F74235197A5A194C470C444787DD83ED99786C1CB76E0AB1EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

collection credential_access defense_evasion evasion execution impact persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's Accessibility service
  Retrieves information displayed on the phone screen using AccessibilityService.
  collection defense_evasion credential_access
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Requests disabling of battery optimizations (often used to enable hiding in the background).
  defense_evasion
behavioral2