Resubmissions

11/09/2026, 00:16

260911-aksjlszydx10

23/07/2026, 16:24

260723-twdpda1shv10

06/11/2025, 00:33

251106-av97eaxlbr7

04/11/2025, 18:15

251104-wv2qxsej7x6

General

  • Target
    TikTok18.apk
  • Size 6.8MB
  • Sample260723-twdpda1shv
  • SHA256 ce0c36194eb90795d1f89a6cccc812463c4bf7bfc4c831e7d49ed65e8a7ad75c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: FantasyHub

    FantasyHub is an Android RAT first seen in November 2025.

  • FantasyHub payload 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • TikTok18.apk
    .apk 6.8MB

TikTok18.apk

  • SHA256 ce0c36194eb90795d1f89a6cccc812463c4bf7bfc4c831e7d49ed65e8a7ad75c
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • FantasyHub payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
0fafa54e52812de9693e5e418e8aa4196735d612c5efc52a115aee5c69eeb641
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=App,O=Org,L=City,ST=State,C=RS
com.p99a7e7cba.tiktok18

Android Permissions

TikTok18.apk

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.p99a7e7cba.tiktok18.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION