TikTokPremium[.]apk

Resubmissions

29/10/2026, 18:12

261029-wthxesdw3s7

29/10/2026, 12:13

261029-pdzfxazs4j7

Sharing

Copy URL Twitter E-mail

General

Target
TikTokPremium.apk
Size 13.2MB
Sample261029-wthxesdw3s
SHA256 22050b151a3c8cbe587b66f74510b5b38bddce466086450395a5c23a2d0ea202
MD5 20a1511865c194a19700cd8701f599f7
SHA1 0f6be2efd2b5ecbc7e9d5b24e64d86cfdce4c92d
SHA512 bfcb99343655f0d959f53ee695bb3cf29c5c28b874dbcd6e65a78f4a264b8eb3f5f76cf655aff3500d2db8caeb5f1b33d50f83f604fe92d1da4ccb0fe4b51efc
SSDEEP 393216:SWA1gVCJ09tFlzJS56fE4pdgnohmbvS3VQzpH7:SjpYtZSE+q3VQF7
TLSH
T15BD633F72622654EE59CA031896D187CDB3E32C58E43D61764B100CD89AD4BEDED2CBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Attempts to obfuscate APK file format
Applies obfuscation techniques to the APK format in order to hinder analysis

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 3 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
TikTokPremium.apk

File Explorer

TikTokPremium.apk

.apk 13.2MB

TikTokPremium.apk

SHA256 22050b151a3c8cbe587b66f74510b5b38bddce466086450395a5c23a2d0ea202
MD5 20a1511865c194a19700cd8701f599f7
SHA1 0f6be2efd2b5ecbc7e9d5b24e64d86cfdce4c92d
SHA512 bfcb99343655f0d959f53ee695bb3cf29c5c28b874dbcd6e65a78f4a264b8eb3f5f76cf655aff3500d2db8caeb5f1b33d50f83f604fe92d1da4ccb0fe4b51efc
SSDEEP 393216:SWA1gVCJ09tFlzJS56fE4pdgnohmbvS3VQzpH7:SjpYtZSE+q3VQF7
TLSH
T15BD633F72622654EE59CA031896D187CDB3E32C58E43D61764B100CD89AD4BEDED2CBE
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

fff837a2dc1b574351583b9c4212e22d6cdb81ee6d31a9e173f4b9c9034098a7

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.silverline.safe

com.template.shellapp.MainActivity

android.intent.action.MAIN

com.template.shellapp.SettingsActivity

com.template.shellapp.AboutActivity

x.mf.Cs6rGkrQloP

x.mf.S5ZRDOuEBaxp

x.mf.VK8wj4ckLbBsCoc

x.mf.Mn8KphaeRLX8hwY

x.eg4

x.mf.EWWaEqGEpH91v9

x.mf.WVEwAyrIAjLa

x.mf.Dky4EFhLmS4w9u

x.mf.PDgsLxDJvj

x.mf.OUBgHR7p7mxfuHuQ

com.silverline.safe.mf.action.dl3enssgl41t0kv8tvkwl3qu com.silverline.safe.mf.action.ovvjenxas5t5b2zbo0jk62hy

x.mf.QFN968LMhUX6qu

x.mf.DXO0xyTZ8ZAuBt

x.mf.Lk9mSP5GFzCt34

com.silverline.safe.mf.action.v3bwo4vhr1wrlj1bw4xdt30r com.silverline.safe.mf.action.cn8sj7l8x2joq281ok5u5y9f

x.ou448.pvw9o.pn

x.mf.HVxwIQh1S4iXhG

x.mf.ZGXGKy520g

x.mf.JuhGcHEaBCyyZ5IA

com.silverline.safe.mf.action.u0o0qj4w5zgcyjx88cigzejz com.silverline.safe.mf.action.ksetxh0mw73fqxxnfqawtg8l

x.mf.LT4IrADqtdVWQD

x.mf.PDfcXHzwQze

x.fqg8.p1vuh.k3

x.mf.SHS5dKjzdMDk

x.q5twr.glvhy.ia

x.c77.fqy.nmb

x.frl

x.wihq.utl.kp3

com.silverline.safe.mf.action.j95ioth5j5vcsx8it28268td com.silverline.safe.mf.action.3c5f5znzvutc3srskonemyy4

x.dg4lv

x.km24.ydt.u99

x.mf.UCImspoe7t

com.silverline.safe.mf.action.kcepwcbhk5mf0x1nysx3fys2 com.silverline.safe.mf.action.pxz5f0wd0zqo2epthkod3n6u

x.mf.B1b1eOOsA8hIV6

x.mf.ZXZ8fXl92rzYXv

x.mf.UYlV3acoNwq

x.mf.CfAe1B2bEHm

com.silverline.safe.mf.action.h53cws1gcpl9obu5gsv5b49a

x.mf.RaFvIAgPXMmyW7wk

x.j8q2.hzzwj.huc

com.silverline.safe.mf.action.j4lbzfn29gru742wltd88x81 com.silverline.safe.mf.action.0d1kbgt6c4rbj19c7e2ai0ew

x.b4d.vxyt.iw9

x.ppq0d.ze9.qt

x.mf.Rw7RFs9VGLJsnBU

x.byx.ne6.pj2

com.silverline.safe.mf.action.vt54oxl9wp29fckplcj999cb

x.mf.TZjy2pOIonUd8Rw

com.silverline.safe.mf.action.xt2q1fs8hx9mb9wqyevckvrq

x.nku.qrkpz.ez

x.mf.VdbQoV5IQ2q4Nv

x.mf.AfqZhF1AjXlol1v7

x.mf.AS7cPYUnHvjJdiP

x.mf.LHvkaDrNCGCvW

x.fwcup.mw46.zi

com.silverline.safe.mf.action.2bja2peho9pq66437mg198cy

x.nz8.dt5vw.vro

x.mf.OXzkzrz9MiMLF5l

x.l7f

x.mf.TpxCmfzMKTF

x.mf.AoxkS0vuYVSrSPL

x.mf.LRkFttnseo3ja

com.silverline.safe.mf.action.e9bgvemrsc0mibbkidif5uh7 com.silverline.safe.mf.action.16wmbowcyjyy0mqncqclzg6w

x.ltop6

x.mf.S01iNOoOhpw

x.mf.CIVl1qjjNu4

x.mf.O1ygO1Mpu30zKb

com.silverline.safe.mf.action.6z4uqpaiae496wxejezrrrh8

x.mf.Fxm452OzbPv6

x.mf.Z6tizEMlC2LaJa

x.i4ld

x.nsax.yz3fe.xb

com.silverline.safe.mf.action.gnbse9esemxsbptrqerbiz5l

x.mf.Uf3EJwkGMTfdMID

x.nc1o.evzg.taz

x.mf.XLRMpfrNUm2UiJf

com.silverline.safe.mf.action.k8b1v3ctmytl51rw4mwoffk5

x.mf.Kk5BxP3OWKblTHL

x.mf.M3I7RWl5pP

x.mf.ObZpLNEyhTC9

x.mf.AIbfltSHX479M

x.l5b.xey.ixk

x.m3uo4.tm6b.dv2

x.mf.CBCyRwQGgf

x.mf.UBPw8Jr2nJldiziz

x.mf.OpshuCsyiXqJg

x.mf.D2W9xfwCb4

x.mf.EgUsvxgJpEv

x.uicf

com.silverline.safe.mf.action.8izsc2fbbz8o2u0mre8m6jpn com.silverline.safe.mf.action.lqbrzr2vwpjyxr5cagxs3f4i

x.hlx.r6mc.jl

x.mf.LNzxj0kCo3wIdF

x.mf.S5Nl74D8sg

x.mf.ZmgxZ6ilNbaQ

com.silverline.safe.mf.action.6fluqqpiwd9xbmzb84wtfy3w

x.mf.SFVrha8F4YjUzo

x.mf.MmBHpTlKhIp

com.silverline.safe.mf.action.yqhfg170fqinhtcq6vwoqlgj

x.kjla0.z0zr7.cw7

x.mf.HFdz3GRcrnscv

x.mf.CvOLeaRyOx

x.hwlc1.mofn.xc

x.mf.N4JsveJh4L9sj0b0

com.template.shellapp.services.SyncService

com.template.shellapp.services.BlockVpnService

android.net.VpnService

x.mf.DYYqqtjPOOZsDF

x.mf.ND4q74efOX9w2DxU

x.mf.UOvl4e2ns2Ev63J

x.xe5.rfx.a8

x.mf.L0KAi8VQ1BhyXn

com.silverline.safe.mf.service.action.ufkt365zw5eygtm7e2io

x.mf.RAHwVIrgHrXgjSA

x.pnl3.nrl4.yul

x.p2yp.fdxp.kx0

com.silverline.safe.mf.service.action.f14l58p071ctdk3y71pk

x.mf.BganXiFF4jkf

x.mf.QsCQ0XN8kZ

x.mf.JxsEUzYoomMQZ

com.silverline.safe.mf.service.action.c9mq9nh49pnmg96smw5d

x.mf.S5qQw0qcim6Dcdq6

x.v33jn

com.silverline.safe.mf.service.action.8gbf9vy68lybaxpj5mm1

x.mf.ZTnmGCV7CV

com.silverline.safe.mf.service.action.qshkzpp8kjmjim2la4hw

x.mf.MwTE7ROuLTGJze

x.sfqa.oskl.wr

x.mf.MohhPxVOcWGP

com.silverline.safe.mf.service.action.1bvutic5ujgw7hgunrnb

x.xyh.hpbw.ln

x.a8wwh.xth.g7g

x.mf.SwQ4LHK8H7XP3KCC

x.mf.Pb2vsWNGkgm9A6

x.mf.JBIXC2XZEATKOwJ

x.mf.CcxEg249lrMC

x.cist.ypk4p.jx

x.mf.K5PhK363Vn4zUl3U

x.be8b.lbg5.fq

x.f7gp.o6b.zf

x.ckdk.s6tl.jf

x.mf.YNF0RV53K8uVrxhG

com.silverline.safe.mf.service.action.s2vh6056r1mnf5fudoms

x.mf.Mi9rPQDxgX6JT

x.mf.RtOFfYD0B5Z9ZcGA

x.mf.E1Upz2EPB1

com.silverline.safe.mf.service.action.8z5lwyd8zvj0uvvxyp57

x.mf.BtHMEiLlq1wasBh5

com.silverline.safe.mf.service.action.dcc1i17g6md9qj3f4feu

x.mf.KyHngrU2Ml60OgY

x.cauu2

com.silverline.safe.mf.service.action.1u0seh0ha93jfskf8qeh

x.vr1y.uuqy.li

x.mf.ZSgncwXJJqVv9zpI

com.silverline.safe.mf.service.action.nng10u0ou0m1r6otucry

x.mf.GCdC50bbkv

x.mmcrp.syl6m.ta

x.mf.ZqHtk7mY5hMu

x.mf.VUgml3kdMg

x.mf.QJfAIPiUYpgp

x.mf.CepwPPA1AdIqjxL

com.silverline.safe.mf.service.action.58w8drywvn5k9man4uid

x.mf.WaoOZCzk63jj

x.kj3r

com.template.shellapp.CB

com.template.shellapp.receivers.BootReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.MY_PACKAGE_REPLACED

x.vw2v7

x.mf.F3kDKU0Nxv

x.mf.IDBZFRpzYP

com.silverline.safe.mf.receiver.action.w0f6g63totnddtjiawvr

x.mfn5.x9xe1.jp

x.mf.Oq9TWlOW1vS4Vx5k

x.mf.QWxT0dsa78

x.mf.At3xP8Rh8oJYsYcj

com.silverline.safe.mf.receiver.action.ddt7ygcss8n87p0vq5ud

x.mf.EDLyUalepOxl2W3

x.b2tp.ld0.eqk

x.mf.YdNymDueQGZ5rG

com.silverline.safe.mf.receiver.action.ym02ru3kyk6w76bkclbt

x.mf.KHDlji6mHe

com.silverline.safe.mf.receiver.action.ncpo9b8flel89gbgcmrj

x.mf.PFkvoXEKtAGP5

x.mf.QVFhT0ofGaK0YSE

x.c9zab

x.mf.NHt1kTyUYT

x.uhn8

com.silverline.safe.mf.receiver.action.hldpvdta9tari975xtbl

x.cm6e.mn5x.y44

x.mf.SHn3xUH8y81X78

com.silverline.safe.mf.receiver.action.2c894cpg0urjj01nk0cf

x.gcf

android.intent.action.USER_PRESENT

x.mf.N2lO2MRFawa4fl4

com.silverline.safe.mf.receiver.action.yqt8w2eiq3sxuvggmag9

x.mf.M9uQcgaMMoE3fXM

x.mf.EirJRqv94XUIa

x.afifg

x.mf.OBJlAJNlq7yqetG

x.mf.CtVA4W3ILIvzr8

x.mf.Z8UQmCyZo5UvPF7T

x.q3gwf.ckua1.af7

x.mf.OBBXmZydJ8DoEPO

x.fi2.d4req.s86

com.silverline.safe.mf.receiver.action.x4f4rqciz0jjcsbzcy7v

x.mf.VezSS7SQL43Cyl

Android Permissions

TikTokPremium.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.REQUEST_INSTALL_PACKAGES

android.permission.POST_NOTIFICATIONS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.FOREGROUND_SERVICE_SPECIAL_USE

android.permission.WAKE_LOCK

android.permission.VIBRATE

android.permission.QUERY_ALL_PACKAGES

com.silverline.safe.permission.MF_TQ64T9UIS6ZHLF9XTA6ZAFP1

com.silverline.safe.permission.MF_JX5T63C2OBG1IXNP8OGL3LJ7

android.permission.USE_FULL_SCREEN_INTENT

android.permission.WAKE_LOCK

com.silverline.safe.permission.MF_U6OKLFJNUWJOISXXRVISRLYX

com.silverline.safe.permission.MF_0NW1UHM6X2GCG5D3G3JBQQAS

com.silverline.safe.permission.MF_5ZTJHIVUVLHHOYRUNLE1HH60

android.permission.SYSTEM_ALERT_WINDOW

android.permission.REORDER_TASKS