Overview

overview

10

Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006.bin
  • Size 8.3MB
  • Sample260910-b7739acm5w
  • SHA256 b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
trojaninfostealerratfantasyhub

Malware Config

Signatures

  • Family: FantasyHub

    FantasyHub is an Android RAT first seen in November 2025.

    trojaninfostealerratfantasyhub
  • FantasyHub payload 1 IoCs
  • Requests dangerous framework permissions 2 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • jaffacakes118_b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006.bin
    .apk 8.3MB

jaffacakes118_b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006.bin

  • SHA256 b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm64arch:arm

  • FantasyHub payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
8d4496aeb48ab211dc04b81811e90c00337deddf5e59fcfa8100ab241d3b8706
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=main_app,O=Org,L=City,ST=State,C=RS
com.pc3f42aa3f.tiktok18

Android Permissions

jaffacakes118_b00c61bf29b2851b18d05c3c28d11a67d8112187f6e87ac74e12a6ade10d0006.bin

Permissions

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.POST_NOTIFICATIONS

android.permission.QUERY_ALL_PACKAGES

android.permission.ACCESS_NETWORK_STATE

android.permission.WAKE_LOCK

com.pc3f42aa3f.tiktok18.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION