TikTok18+[.]apk | Triage™

Resubmissions

10/07/2026, 07:43

260710-jj73cafv8q7

10/07/2026, 05:36

260710-gap43adx7q7

10/07/2026, 05:33

260710-f8vlrse13t7

10/07/2026, 05:31

260710-f71fmadx5q7

Sharing

Copy URL Twitter E-mail

General

Target
TikTok18+.apk
Size 33.7MB
Sample260710-gap43adx7q
SHA256 059290e2fc63ede6c52b3d3321d1b83315fee00824763210ca0d3319c612417a
MD5 cebea7e42d4d6a9a7d0623f1054e30f7
SHA1 36638cb9cf58e629223856a3ec1c1312100e0412
SHA512 21c7d31a9f92c11db3d4cec184b876cde809687d839906a8d9a184e6caaaf432cc52b744588a506dccbebf19283038a82779c467e41ea645413b2cde715b4864
SSDEEP 786432:UNHlqX7/y6AFsKKRS/3SIjmgEd8D7ODKkmd:UNHlqLK60sKK0xmno7ODKkmd
TLSH
T11677230AEBC87E2BC5F74236293955244C470C45478BDA82ED8A792C6C776E1FB1DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
TikTok18+.apk
unpack001/payload.base

File Explorer

TikTok18+.apk

.apk 33.7MB
payload.base

.apk 13.1MB

TikTok18+.apk

SHA256 059290e2fc63ede6c52b3d3321d1b83315fee00824763210ca0d3319c612417a
MD5 cebea7e42d4d6a9a7d0623f1054e30f7
SHA1 36638cb9cf58e629223856a3ec1c1312100e0412
SHA512 21c7d31a9f92c11db3d4cec184b876cde809687d839906a8d9a184e6caaaf432cc52b744588a506dccbebf19283038a82779c467e41ea645413b2cde715b4864
SSDEEP 786432:UNHlqX7/y6AFsKKRS/3SIjmgEd8D7ODKkmd:UNHlqLK60sKK0xmno7ODKkmd
TLSH
T11677230AEBC87E2BC5F74236293955244C470C45478BDA82ED8A792C6C776E1FB1DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

9a7415baba8b169427668df5cd8742d9580c90bad7754dcb729468bd6e967c9e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国

com.kit.kitty

payload.base

SHA256 80521da70a66581ad9f5f4d8db4f99fa14025b039942dff5f5b4741426048896
MD5 cc451dc1c492252545d4dc1765aebb43
SHA1 1a4d7c8e85d860a35e3f3374c7f583c6cd2fd537
SHA512 2914b725d9a5be723df176a7dc93f141529b9ab56963f92ba9b0899e7b9bb4ddd7f10a72fc0ba7be1d5dd40d9b352da6279a1d08d55509d825c95ffeb3c4ad00
SSDEEP 393216:zYB8tkYB8tfliP8pYb26YB8tNYB8tRx868wRYB8t90:MSEQP8P3VlQmJ
TLSH
T119D6020AEFC8BA2BC5F74235197A5A194C470C444787DD83ED99786C1CB76E0AB1EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

android

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

17b16a15a10b788deeb004a96bb4f163d08f65c603e4d7e1dec54fc6125da55e

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=np,OU=np,O=np,L=南京,ST=江苏,C=中国

com.kisa.octagonpanel

com.kisa.octagonpanel.keepalive.WatchdogAlarmReceiver

com.kisa.octagonpanel.keepalive.DozeHeartbeatReceiver

com.kisa.octagonpanel.keepalive.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.LOCKED_BOOT_COMPLETED android.intent.action.QUICKBOOT_POWERON com.htc.intent.action.QUICKBOOT_POWERON android.intent.action.MY_PACKAGE_REPLACED

com.kisa.octagonpanel.keepalive.ConnectionReviveReceiver

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED android.intent.action.DREAMING_STOPPED android.intent.action.DREAMING_STARTED android.intent.action.PHONE_STATE android.intent.action.DATE_CHANGED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

com.kisa.octagonpanel.keepalive.NetworkReviveReceiver

android.net.wifi.WIFI_STATE_CHANGED android.net.wifi.STATE_CHANGE

com.kisa.octagonpanel.receiver.SmsReceiver

android.provider.Telephony.SMS_RECEIVED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

Android Permissions

TikTok18+.apk

Permissions

android.permission.FOREGROUND_SERVICE

android.permission.INSTALL_PACKAGES

android.permission.SCHEDULE_EXACT_ALARM

android.permission.BIND_VPN_SERVICE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.INTERNET

com.kit.kitty.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.DELETE_PACKAGES

android.permission.QUERY_ALL_PACKAGES

TikTok18+.apk

File Signature issue

com.kit.kitty.MainActivity

com.kit.kitty.VpnPermissionActivity

com.kit.kitty.FenrirVpnService

androidx.profileinstaller.ProfileInstallReceiver

androidx.startup.InitializationProvider

payload.base

File Signature issue

com.kisa.octagonpanel.MainActivity

com.kisa.octagonpanel.onboarding.OnboardingActivity

com.kisa.octagonpanel.ConnectionSettingsActivity

com.kisa.octagonpanel.overlay.GateOverlayActivity

com.kisa.octagonpanel.accessibility.WardAccessibilityService

com.kisa.octagonpanel.service.WardForegroundService

com.kisa.octagonpanel.keepalive.guard.GuardService

com.kisa.octagonpanel.keepalive.sync.FakeAuthenticatorService

com.kisa.octagonpanel.keepalive.sync.FakeSyncAdapterService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.kisa.octagonpanel.keepalive.WatchdogAlarmReceiver

com.kisa.octagonpanel.keepalive.DozeHeartbeatReceiver

com.kisa.octagonpanel.keepalive.BootReceiver

com.kisa.octagonpanel.keepalive.ConnectionReviveReceiver

com.kisa.octagonpanel.keepalive.NetworkReviveReceiver

com.kisa.octagonpanel.receiver.SmsReceiver

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.kisa.octagonpanel.keepalive.sync.FakeContentProvider

androidx.startup.InitializationProvider