TikTok18.apk

Classification: Malicious

TikTok18.apk is a dropper. Detected by 7 antivirus engines. Linked to Trickmo malware. 6 sightings, last seen 2026-02-27.

Detection summary

  • 7 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKMO (S0427)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Trickmo Triage 2026-02-09 12:20:07 2026-02-27 09:02:49 malicious-activity S0427 TrickMo
TrickMo MalwareBazaar Abuse.ch 2026-02-16 09:59:39 2026-02-16 09:59:39 malicious-activity S0427 TrickMo

Tags

trickmo android banker collection credential_access defense_evasion discovery evasion execution impact infostealer persistence trojan

Sample information

Filenames
4284e6bbc2fc274d8b0a1f37f91408efc0404e4cae0ba28abc4d583bc59af6bd.apk, TikTok18.apk
MD5
e44f95c280846df11a96aeaddaf64cb5
SHA-1
feff217787511a2d15f48aefaf1f43651fcef1a4
SHA-256
4284e6bbc2fc274d8b0a1f37f91408efc0404e4cae0ba28abc4d583bc59af6bd
SHA-512
7832f752e3d0538b4fee836175447966c0aaf2be178e491aaf65e1e0ed7acd19e7ee0df5d9e05eb28968f2fc9819f1773a0e09e8fbac2ba65c3e832d58284b21
First indexed
2026-02-09 12:20:07
Last updated
2026-08-13 22:41:46

Antivirus detections

EngineDetection
AhnLab-V3Trojan/Android.Banker.1268520
Avast-MobileAndroid:Evo-gen [Trj]
BitDefenderFalxAndroid.Riskware.Marcher.B
DrWebAndroid.BankBot.16127
ESET-NOD32Android/TrojanDropper.Agent.NAA trojan
IkarusTrojan-Dropper.AndroidOS.MGV
KasperskyHEUR:Trojan-Dropper.AndroidOS.Hqwar.gy