TikTok-Lite[.]apk | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
TikTok-Lite.apk
Size 17.3MB
Sample260923-xx2dlsaf32
SHA256 31cacd625f62ba6c62f9fb49c393ca0c1f1b05f4b89bd49a0df3117099ecec19
MD5 7329cd9b3b3dcd34281024485486d539
SHA1 f52226bc3a2eba4f29177d13fa02a4ccf5d2c569
SHA512 f2ceb45c992e8a43e1b49006d6ae84c68a42032cee1e9cc77fe40ddea28e11d940163c9f65f3de7b584517ecaeb7f59dbcf552a5efb4e26c896b0c351db52b59
SSDEEP 393216:6EAATy7ZglUEGHo51wkkqDUiT23U7voM7D0P+dpAzFEmRO8OC:6EAI0ZgaErEeUimU7AM7ZoziOO8Z
TLSH
T1C40733A3B399192ED4B784770C8647352596CD144B82AB83B509F3AE6C73BE84F59FC0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Required to be able to advertise to nearby Bluetooth devices.	android.permission.BLUETOOTH_ADVERTISE
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Required to be able to advertise and connect to nearby devices via Wi-Fi.	android.permission.NEARBY_WIFI_DEVICES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to read video files from external storage.	android.permission.READ_MEDIA_VIDEO
Allows an application to read image or video files from external storage that a user has selected via the permission prompt photo picker.	android.permission.READ_MEDIA_VISUAL_USER_SELECTED

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
TikTok-Lite.apk

File Explorer

TikTok-Lite.apk

.apk 17.3MB

TikTok-Lite.apk

SHA256 31cacd625f62ba6c62f9fb49c393ca0c1f1b05f4b89bd49a0df3117099ecec19
MD5 7329cd9b3b3dcd34281024485486d539
SHA1 f52226bc3a2eba4f29177d13fa02a4ccf5d2c569
SHA512 f2ceb45c992e8a43e1b49006d6ae84c68a42032cee1e9cc77fe40ddea28e11d940163c9f65f3de7b584517ecaeb7f59dbcf552a5efb4e26c896b0c351db52b59
SSDEEP 393216:6EAATy7ZglUEGHo51wkkqDUiT23U7voM7D0P+dpAzFEmRO8OC:6EAI0ZgaErEeUimU7AM7ZoziOO8Z
TLSH
T1C40733A3B399192ED4B784770C8647352596CD144B82AB83B509F3AE6C73BE84F59FC0
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

ea67d20f4c8cfb133f797bb33bacff97889426237a9091f3f2305e369b6bf7a2

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Micro Cao,OU=ByteDance,O=ByteDance,L=Beijing,ST=Beijing,C=CN

com.zhiliaoapp.musically.go

android.permission.ACCESS_NETWORK_STATE android.permission.INTERNET android.permission.POST_NOTIFICATIONS android.permission.ACCESS_WIFI_STATE android.permission.ACCESS_ADSERVICES_ATTRIBUTION com.google.android.gms.permission.AD_ID com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA com.zhiliaoapp.musically.go.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE com.google.android.gms.permission.AD_ID android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.WRITE_EXTERNAL_STORAGE android.permission.READ_CONTACTS android.permission.CAMERA android.permission.RECORD_AUDIO android.permission.GET_TASKS android.permission.VIBRATE android.permission.ACCESS_NETWORK_STATE android.permission.WRITE_SYNC_SETTINGS android.permission.AUTHENTICATE_ACCOUNTS android.permission.ACCESS_WIFI_STATE android.permission.FOREGROUND_SERVICE android.permission.WAKE_LOCK android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH_SCAN android.permission.BLUETOOTH_ADVERTISE android.permission.BLUETOOTH_CONNECT android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_COARSE_LOCATION android.permission.CHANGE_WIFI_STATE android.permission.NEARBY_WIFI_DEVICES com.android.launcher.permission.INSTALL_SHORTCUT com.android.launcher.permission.UNINSTALL_SHORTCUT com.sec.android.provider.badge.permission.READ com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS android.permission.READ_APP_BADGE com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE android.permission.UPDATE_APP_BADGE com.vivo.notification.permission.BADGE_ICON android.permission.POST_NOTIFICATIONS android.permission.READ_MEDIA_AUDIO android.permission.READ_MEDIA_IMAGES android.permission.READ_MEDIA_VIDEO android.permission.FOREGROUND_SERVICE_DATA_SYNC android.permission.DETECT_SCREEN_CAPTURE android.permission.READ_MEDIA_VISUAL_USER_SELECTED android.permission.ACCESS_ADSERVICES_ATTRIBUTION com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA com.samsung.android.mapsagent.permission.READ_APP_INFO com.orange.update.permission.READ_ATTRIBUTION com.google.android.c2dm.permission.RECEIVE com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE android.permission.RECEIVE_BOOT_COMPLETED com.zhiliaoapp.musically.go.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION android.permission.SET_WALLPAPER android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.MODIFY_AUDIO_SETTINGS com.android.vending.BILLING

com.zhiliaoapp.musically.go.mini.MainActivity

android.intent.action.MAIN

com.zhiliaoapp.musically.go.mini.StubActivity

com.zhiliaoapp.musically.go.deeplink.AppLinkHandlerV2

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW

com.zhiliaoapp.musically.go.deeplink.DeepLinkActivityV2

android.intent.action.VIEW

com.zhiliaoapp.musically.go.notification.NotificationActivity

com.ss.android.ugc.aweme.common.ui.webview.CommonWebViewActivity

dom.ss.android.deviceregister.AActivity

dom.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.ss.android.ugc.aweme.main.homepage.MainActivity

com.ss.android.ugc.aweme.main.homepage.DetailActivity

com.ss.android.ugc.aweme.main.homepage.FeedSearchActivity

com.ss.android.ugc.aweme.app.AppLinkHandlerV2

com.ss.android.ugc.aweme.deeplink.DeepLinkActivityV2

net.openid.appauth.RedirectUriReceiverActivity

android.intent.action.VIEW

com.ss.android.ugc.account.LogoutDialogActivity

com.ss.android.ugc.aweme.hybridkit.core.TranslucentActivity

com.ss.android.ugc.aweme.compliance.common.ui.ComplianceConsentDialogActivity

com.ss.android.ugc.aweme.compliance.privacy.ui.paprompt.PaPromptContainerActivity

com.ss.android.ugc.aweme.login.TokenFilterInvisibleActivity

android.intent.action.VIEW

com.ss.android.ugc.aweme.account.login.v2.ui.SignUpOrLoginActivity

com.ss.android.ugc.aweme.account.login.v2.ui.LoginActionFlowActivity

com.ss.android.ugc.aweme.account.login.ui.MusCountryListActivity

com.ss.android.ugc.aweme.account.login.twostep.TwoStepAuthActivity

com.ss.android.ugc.aweme.account.login.v2.base.CommonFlowActivity

com.ss.android.ugc.aweme.account.login.twostep.TwoStep2046AuthActivity

com.ss.android.ugc.aweme.login.recover.RecoverDeletedAccountActivity

com.ss.android.ugc.aweme.login.SignUpActivity

com.ss.android.ugc.aweme.creativetool.CreationActivity

com.ss.android.ugc.aweme.creativetool.creation

com.ss.android.ugc.aweme.creativetool.draft.DraftActivity

com.ss.android.ugc.aweme.creativetool.music.MusicActivity

com.ss.android.ugc.aweme.creativetool.sysshare.ToolsSystemShareActivity

android.intent.action.SEND android.intent.action.SEND_MULTIPLE

com.ss.android.ugc.aweme.creativetool.music.MusicTrimActivity

com.ss.android.ugc.aweme.creativetool.publish.PublishBroadcastReceiver

com.ss.android.ugc.aweme.main.homepage.child.ChildEmptyFinishActivity

com.ss.android.ugc.aweme.profile.UserProfileActivity

com.ss.android.ugc.aweme.profile.edit.AvatarFlowActivity

com.ss.android.ugc.aweme.profile.qrcode.scan.QRCodeScanActivity

com.ss.android.ugc.aweme.profile.qrcode.scan.SimpleQRCodeScanActivity

com.ss.android.ugc.aweme.profile.qrcode.QRCodeAlbumActivity

com.ss.android.ugc.aweme.story.immersive.arch.StoryImmersiveActivity

com.ss.android.ugc.aweme.story.archive.StoryArchiveActivity

com.ss.android.ugc.aweme.friends.ufr.ui.UFRGuideActivity

com.ss.android.ugc.aweme.relation.find.contact.ContactsActivity

com.ss.android.ugc.aweme.relation.find.facbook.FacebookFriendsActivity

com.ss.android.ugc.aweme.relation.find.invite.InviteFriendsActivity

com.ss.android.ugc.tiktok.pns.ui.ScheduleDowntimeActivity

com.ss.android.ugc.aweme.language.view.ChooseLanguageActivity

com.ss.android.ugc.aweme.appspermissions.AuthManagementActivity

com.ss.android.ugc.aweme.mini_lobby.internal.LobbyInvisibleActivity

com.ss.android.ugc.aweme.mini_lobby.login.AuthorizeActivity

com.bytedance.hybrid.spark.page.SparkActivity

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.ss.android.ugc.aweme.pns.universalpopup.core.ui.UniversalPopupActivity2

com.ss.android.ugc.aweme.pns.agegate.ui.view.PNSAgeGateActivity

com.ss.android.ugc.aweme.pns.agegate.ui.view.PNSAgeGateTranslucentActivity

com.bytedance.ies.xbridge.base.activity.GetPermissionActivity

com.bytedance.ies.powerpermissions.FakeActivity

com.bytedance.push.notification.PushActivity

com.zhiliaoapp.musically.go.pushsdk.action

com.bytedance.bdturing.twiceverify.TwiceVerifyWebActivity

com.ss.android.ShowDialogActivity

com.ss.android.deviceregister.AActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.ss.android.account.share.data.write.activity.ShareDataActivity

com.ss.android.account.share.data.read.ReadTempActivity

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

com.vk.sdk.VKServiceActivity

com.bytedance.tiktok.go.live.wallpaper.ui.LiveWallPaperPreviewActivity

com.bytedance.tiktok.go.live.wallpaper.ui.LocalLiveWallPaperActivity

com.ss.android.ugc.aweme.ad.splash.show.NormalSplashAdActivity

com.bytedance.ies.live_impl.activity.LivePlayActivity

com.bytedance.ies.live_impl.activity.LiveContainerActivity

com.bytedance.ies.live_impl.activity.LiveDummyActivity

com.android.billingclient.api.ProxyBillingActivity

com.android.billingclient.api.ProxyBillingActivityV2

com.google.ar.core.InstallActivity

com.bytedance.android.debug_tool.ui.SingleBusinessLiveSettingsActivity

com.ss.android.ugc.aweme.ecommerce.router.PowerPageHostActivity

com.ss.android.ugc.aweme.ecommerce.anchor.fragment.EcCommentAnchorPanelActivity

com.ss.android.ugc.aweme.ecommerce.anchor.fragment.EcVideoAnchorPanelActivity

com.ss.android.ugc.aweme.ecommerce.showcase.store.StoreActivity

com.ss.android.ugc.aweme.ecommerce.showcase.showcase.ShowcaseActivity

com.ss.android.ugc.aweme.ecommerce.ordersubmit.OrderSubmitActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.payment.billingaddress.BillingAddressActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.page.OrderSubmitActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.payment.subpayment.SubPaymentListActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.page.TransparentLoadingOSPActivity

com.ss.android.ugc.aweme.ecommerce.base.pdp.ui.PdpActivity

com.ss.android.ugc.aweme.ecommerce.base.pdpv2.PdpV2Activity

com.ss.android.ugc.aweme.ecommerce.base.address.edit.AddressEditActivity

com.ss.android.ugc.aweme.ecommerce.base.address.edit.detail.AddressEditDetailActivity

com.ss.android.ugc.aweme.ecommerce.base.widget.regionpicker.activity.DistrictActivity

com.ss.android.ugc.aweme.ecommerce.base.address.list.AddressListActivity

com.ss.android.ugc.aweme.ecommerce.base.messagecenter.MessageCenterActivity

com.ss.android.ugc.aweme.ecommerce.base.review.ProductReviewActivity

com.ss.android.ugc.aweme.ecommerce.base.review.gallery.ReviewGalleryActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.payment.bnpl.BnplMiddleActivity

com.ss.android.ugc.aweme.ecommerce.base.osp.payment.view.PaymentTransitionActivity

com.ss.android.ugc.aweme.ecommerce.singpass.RedirectUriReceiverActivity

com.ss.android.ugc.aweme.ecommerce.singpass.TransparentSingPassHandleActivity

com.ss.android.ugc.aweme.ecommerce.compliance.utils.ComplianceDialogActivity

com.bytedance.android.ecommerce.ocr.view.OcrActivity

com.bytedance.pipo.ocr.view.CardOcrActivity

com.bytedance.pipo.kyc.singpass.PipoMiddleActivity

com.bytedance.globalpayment.googlepayapi.PIPOPayActivity

com.tokopedia.loginkit.view.LoginLauncherActivity

net.openid.appauth.AuthorizationManagementActivity

com.ss.android.ugc.aweme.minidrama.MiniDramaHostActivity

com.ss.android.ugc.aweme.zero.rating.job.ZeroRatingJobService

com.ss.android.ugc.aweme.push.di.ies.MessageHandler

com.ss.android.fcm.message

com.ss.android.ugc.aweme.push.account.AccountSyncService

android.content.SyncAdapter

com.ss.android.ugc.aweme.push.account.AuthenticatorService

android.accounts.AccountAuthenticator

com.fcm.service.SSGcmListenerService

com.google.firebase.MESSAGING_EVENT

com.fcm.service.FcmRegistrationJobIntentService

com.ss.android.message.log.SubLogService

com.ss.android.ugc.aweme.push.local.LocalPushCheckJobService

com.ss.android.ugc.aweme.creativetool.publish.PublishNotifyService

com.ss.android.ugc.aweme.creativetool.publish.extract.OriginalSoundUploadService

com.ss.android.ugc.aweme.creativetool.publish.extract.video.VideoFramesUploadService

com.ss.android.ugc.aweme.storage.AutoClearCacheJobService

com.bytedance.common.wschannel.server.WsChannelService

com.bytedance.common.wschannel.client.WsClientService

com.ss.android.message.NotifyService

com.ss.android.message.action.PUSH_SERVICE

com.ss.android.message.log.LogService

com.ss.android.push.DefaultService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.measurement.AppMeasurementService

com.google.android.gms.measurement.AppMeasurementJobService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.bytedance.android.livesdk.notificatoin.AudioLiveService

com.ss.android.socialbase.downloader.downloader.IndependentProcessDownloadService

com.ss.android.socialbase.downloader.remote

com.ss.android.socialbase.downloader.notification.DownloadNotificationService

com.ss.android.socialbase.downloader.downloader.DownloadService

com.ss.android.socialbase.downloader.impls.DownloadHandleService

com.ss.android.socialbase.downloader.downloader.SqlDownloadCacheService

androidx.room.MultiInstanceInvalidationService

com.bytedance.apm6.traffic.TrafficTransportService

Android Permissions

TikTok-Lite.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.POST_NOTIFICATIONS

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.google.android.gms.permission.AD_ID

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.zhiliaoapp.musically.go.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.gms.permission.AD_ID

android.permission.INTERNET

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_CONTACTS

android.permission.CAMERA

android.permission.RECORD_AUDIO

android.permission.GET_TASKS

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.WRITE_SYNC_SETTINGS

android.permission.AUTHENTICATE_ACCOUNTS

android.permission.ACCESS_WIFI_STATE

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_SCAN

android.permission.BLUETOOTH_ADVERTISE

android.permission.BLUETOOTH_CONNECT

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.CHANGE_WIFI_STATE

android.permission.NEARBY_WIFI_DEVICES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.sec.android.provider.badge.permission.READ

com.sec.android.provider.badge.permission.WRITE

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.UPDATE_SHORTCUT

com.sonyericsson.home.permission.BROADCAST_BADGE

com.sonymobile.home.permission.PROVIDER_INSERT_BADGE

com.anddoes.launcher.permission.UPDATE_COUNT

com.majeur.launcher.permission.UPDATE_BADGE

com.huawei.android.launcher.permission.CHANGE_BADGE

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

android.permission.READ_APP_BADGE

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

me.everything.badger.permission.BADGE_COUNT_READ