General

  • Target

    Bad_North__Jotunn_Edition_2.00.19_latestmodapks.com_.apk

  • Size

    185.8MB

  • MD5

    d8de037b535ef276269bf75c5b93cf6b

  • SHA1

    6d03f99074db622aa40564480fe9457e9ac08af9

  • SHA256

    75c74b73949d53c4220b3666cee11d32bc53095adb61cbccbc5bdcdce6138af3

  • SHA512

    8f022393be62544d09a3581ac0fba00a70edd4992f1234c9c7cb763d8e68119cecb6b21b7a7bbde96baa6a536be53d2aeaab36de7668c7f23add8ebb9da3f6d5

  • SSDEEP

    3145728:RrJTLQegYNHOxMtD3mtwX3qyeLJAkw3b9JsDWu+LfX+hpurP9xloaYf7+XkoRVEy:RdLfgovtO4qIRJIsX+hpYlwf7+3fEfL+

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs

Files

  • Bad_North__Jotunn_Edition_2.00.19_latestmodapks.com_.apk
    .apk android arch:arm

    Password: Infected

    com.PlausibleConcept.BadNorthFull

    com.amberstudio.mylibrary.UnityPlayerActivity_Fullscreen


  • Compat.browser
  • DefaultWsdlHelpGenerator.aspx
    .js
  • GoogleService-Info.plist
    .xml
  • SaveIcon.png
    .png
  • TweetUnity.png
    .png
  • bad.txt
    .zip

    Password: Infected

  • main.84.com.PlausibleConcept.BadNorthFull.obb
    .jar
  • boot.config
  • browscap.ini
  • config
  • config.xml
    .xml
  • data.unity3d
  • global-metadata.dat
  • google-services-desktop.json
  • google-services.json
  • machine.config
    .xml
  • mscorlib.dll-resources.dat
  • resources.resource
  • settings.map
    .xml
  • sharedassets1.resource
  • unity default resources
  • web.config
    .xml

Android Permissions

Bad_North__Jotunn_Edition_2.00.19_latestmodapks.com_.apk

Permissions

com.android.vending.CHECK_LICENSE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_EXTERNAL_STORAGE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.c2dm.permission.RECEIVE