f37de65755e461f7ea9fbddb0c0c752b4a12f6995d555c4dcf817149c82e7e72 | Triage™

Analysis

max time kernel
12s
max time network
17s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
11/08/2026, 23:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Bad-North-v2.00.22-full-apkvision.apk
Size 191.8MB
Sample260811-288z2seq2s
SHA256 f37de65755e461f7ea9fbddb0c0c752b4a12f6995d555c4dcf817149c82e7e72
MD5 87058ec87ef675254e3647dcd7b3e77c
SHA1 b639b6f61b0412152ec2c56c61d121a2f0bb2177
SHA512 de50e8563a0fa615daf164a0de3c08eaaec7a86f3ba0e7a453c61189fa0e38690c14cd9c314f6683cc3af2540e010a065cd2960fe7ba12850d250867e006f01e
SSDEEP 3145728:9+vms4QszBc0q5xMtD3mtwf3qyeLJAkw3b9JsDWu+LfX+hpurP9xloqYx7+XkoRr:9o/sV1NtOAqIRJIsX+hpYlIx7+39
TLSH
T145A83393F146A911CD9A9D36CD63AD6503333D66FF06164B3050BB2AB9F32C25F22B46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.PlausibleConcept.BadNorthFull

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	com.PlausibleConcept.BadNorthFull

com.PlausibleConcept.BadNorthFull
1⤵
- Checks CPU information
- Checks memory information
PID:4143

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 15ea955ab0ef9cdbdb7d07b8b8971c9cba379477e792d4bb042670a2440eb3b6
MD5 9b509f0f4af2972b24cb618f34a578bb
SHA1 7dd770e0bc6d3773a4cab9f9f5e49f9fcd9bd464
SHA512 6f97619a3170b62e24f978145a50cc9069b7f006877cea12d0a9037ee35c9cfabc3f2b0f6ab6f50b34321a02918572f1aa0b60a41d464e3596be462cb7018b80
SSDEEP 12:TL6Esu7LzmzsRmBEyPbP/DvJ+/0Fl6efioL:TLzHmz3GSP/DvJlFhz
TLSH
T17572ABCC5E10E203E237033A20CB93D20E38610E4773E60B3A6008249E431C8B052F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 27933055a361d0b41bd2a768cd7d327c1e22cffde3925a9eac33dfbc21886825
MD5 a2a57348f2cef92b28917bbfe90e79fa
SHA1 6d055a285ea4e595ea244e51bf5b2bd68ffa9c59
SHA512 87137fcfae51de1e98b16e195035c52b26f9920e570d3ad868306f44a57ee9c2f0821c7f6ca3294ac36625b1ae470d8f54550ddeedec7f7b3de617359f1fe761
SSDEEP 12:TL6UE87LzmzsRmBEyPbP/h1V49blqYFl0W+vJ+/0Fl6efioL:TL6gHmz3GSP/h1V499FivJlFhz
TLSH
T1B2722B89BA24D663E377473964CBE3D22D38311B0B77E61A39551E2C5D43388A062F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 6615b993919333f3042398b0111ac00b51b63acc105dd0c8ecdee18b3afe5b22
MD5 c54a42386c944047094be21287581870
SHA1 a2714760a3bed15cf1a5b5b737805df40ae28c1b
SHA512 1f3b8886f73b35efd61e0369eb1a1747df179a83526ecc7d57246b358c887b1900d4102db3b2626919926dc099aabd9212a4b7f0675fb05656b6a539fd75cf29
SSDEEP 24:TLQCHmz3GSP/J/fKax4qDX499FivJlFhz:TkCGKSP/Jaax4uI521x
TLSH
T161722889B964D663F2770B3D51CBD3C12E38305A0B63E25639556F2C5E43384A161F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 25b52fb60de341915cfad9a411f17481661c9d279c04c57b91a0bf9d0961eea4
MD5 735283bc70ce1f7db14b72d97141fbbe
SHA1 9415539aca6bf80c949cd7e2fd9648ff43ff6961
SHA512 0ebed06d854ab5c56925db2babe401984455651f1bd8eda74429b9ebbfc4e3d0b4210d5a8a866774723d2c2629028d21c0ef1c660188a651362354418ee2403e
SSDEEP 12:TL08ETu7LzmzsRmBEyPbP/JuPBOLax1HOAU8cjWlEen49blqYFl0W+vJ+/0Fl6ex:TL0bCHmz3GSP/+Kax4qDX499FivJlFhx
TLSH
T155722889B968D663F2770B3D55C7E2D12E3830570B63E25639166F2C5E43394A161F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 f1c7b509b06181178454f11283843643e9dd6686a779e31659a2df75b14d2336
MD5 e1f85f2ace166e6d33aaa23373b3ac7f
SHA1 728b753dd5c90cfbe7910787199c93316e986a34
SHA512 22b6dee4650800804472893fdece46811b5fa8be019ce37025ba647863ab3f38f1decb1cf71787c78ea60bf98a293ca38f2d93739562f55b97d24c2b5b86754e
SSDEEP 6:l9bNFlgls1dbP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/WW//:TLuEdb7LzmzsRmBEyPbP/W2
TLSH
T12072268D8E106206C1270277BCCA53951F28611E4377AA473A640864AE53198B091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db
Size 16KB
SHA256 2a340388f145288c8867ecda5c58991d8dd97363ac730d5a0251136491461a20
MD5 8226b5c8e42bf2eb5cf43ad049baee4b
SHA1 2b9e16b59135c2a51275c60a1258a0e3af8a0e51
SHA512 a3da4d57f315e982a474cad7a762812b7461e3f8e83b49edff8afcd4ffc4d527557f5018e25c8549454b30dc7ea56144524008be4b373f53ac306e769c0dfd8e
SSDEEP 6:l9bNFleLIls1mP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDEm7LzmzsRmBEyPbBvOwVQ
TLSH
T10372D8CD8F10A206C617033770CAD3950F78551E83679647166408615E52198B051E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 c149ec59a725a54adb1019326df628d221b6f969a30d29c621e44ecd23ab67e7
MD5 7c495372d695180e57d05f7a8a29d527
SHA1 5428718b92d414fde7b73e2e5346cfb6dc979d51
SHA512 ba7b5c667a2d5c20e6bdca3fc01053bef91d27a1306baa9f92760f6c21ee679f3d85d46c0093c8efe0d7f8809bd587fea18ea0ac36394f460f0989b1dbad6b0f
SSDEEP 6:7+/l9ePPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKN/Z:7+tA3qLmq9RmBEyPbOZ
TLSH
T14C0212997BC21D13C519567B94D983541E10E7258362CB5B56A008647C5B5CCB894ED4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 559e098db58ee8481ab9d8698a96274202b57a6be24294080d380617cc5442e6
MD5 d1a4dc4e6dabfe4f11c4d0dff87f383d
SHA1 fcee8517c7a55d3cdd3cd9fc3002d36b378f3efc
SHA512 eb3fd5bcc4bfa2d956cff2287a756d51f9f3b27b399a39fe43fedb24ab8f9f6812e0293663948f93499d4b512c7466688f96906496cddeb5ec5b3dd6dfd0ba9d
SSDEEP 6:7+/li7g9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKtM:7+ti7qL8En9zmzrfRmBEyPbh
TLSH
T121912BCDDF112603C17B4B77B8CF93506D2862298377DD576BA80474BD435899051F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 6a10e0e36440bdc5316d2db78ba7f0740d4c7b87b2ed21bd7156cb74c9a62f78
MD5 2ef9d121dbd1819939a00db7b3ee6e9d
SHA1 174657dc33a1366fe777b9230e99bc275787b338
SHA512 bbf0ba64ca68a263656736190c5a36eb43e52a6eeb416ab51fc54e3b32244e0286269b817c9300cbb16434f14e45fd0acdffccd11ee7cd8553bfb730460bbd31
SSDEEP 24:7+tyKax4qDX499FivJlFhjqL0bCHmz3GSv:7Mnax4uI521VqPGKSv
TLSH
T1A3026889B969D673F27B0B3D61C7E2C12E3C305B0BA3E65639126F2C5E43394A161F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 9646c04da4d19100c0a74b0f0b154add323cb90aa306e6d60afc8739fbdfe533
MD5 7bbb1a6b8d6c302cfc6b9759a096de20
SHA1 0c278c951d313a7ca9f76f65e15be4deba6c6b86
SHA512 124bfbdc6191b02058e50d2ff3b1bc67e14eefe8d3644b4240c54d054ced1abd5e1c6ee6ccbd7fd084ca4907dc894b791962c2df6cd2143c8f3b1bce2b38c316
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 c39eced914094843796a6923f66296f0fc7a60b0adda2b199b43c6c3293782f1
MD5 263bb177f6d439aacc0ad83a0a86e2ff
SHA1 d9a784d41c326375fbd2ef5a21a42fe303c1a4ed
SHA512 42eaded2152091d032468a2106abc781ff7f7403fc5c8c4f924d2d8b851b12a0d601adf5547e32163ea8379568ddecf54a35ddafad7b5d8439b181295acdf23c
SSDEEP 6:7+/l98qFn1Mg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKp:7+typqLiuWd7RmBEyPbO
TLSH
T11902229CB3801812CC2D9677D0E483400E00A758C273CB2F0550089A2C438CCA4A0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.PlausibleConcept.BadNorthFull/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 35bec1505db3a237f1281959fb0e0a84dae8618857550c6f3abbdc9eca8eedcb
MD5 06d0ca60d86b501c3f8719ed80794f8a
SHA1 c0ab879e7773557a4d5d48d9e6aa0656934039a1
SHA512 0e248fd2eb87b72ad5aba362b343f129fd87dcf323d4f80ad065320ee410a9e60e075d779c123f9112ff3a768e5d937633becddc94d083f421d57aeab5fcbd00
SSDEEP 6:7+/lM4Pg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKY:7+tPqLJdKBRmBEyPbD
TLSH
T1D391C09C7B400803C0196B7B90D4C3400D106714C333CB470D9008543C037CCE490E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation3001935041104032637tmp

Path /data/data/com.PlausibleConcept.BadNorthFull/files/PersistedInstallation3001935041104032637tmp
Size 566B
SHA256 98c161ca3de8a9e300bb5a7f12d79374f8917ed37a74f1b5fb570ef98377ed27
MD5 df0ae3d576d31575ef556c0122c44876
SHA1 b41edae30d12aa6ce6dc2d9788d8f02ad1fdd90f
SHA512 b657bffd8f8b330c1440bed2ae0117a230e25005036a117a248eadecd3316404477cf868b121c2204d9908e28550b1d2fae23e884d6c7dcfb1199f3903115c37
TLSH
T12EF0900E023C8965F809BB9317C9FF28090C08E01BEF08CC3D0A68A4FAA0C71A3C3808
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation392845828144074511tmp

Path /data/data/com.PlausibleConcept.BadNorthFull/files/PersistedInstallation392845828144074511tmp
Size 90B
SHA256 2141a489ff34cb871c967f61091dfc7c5dbf73186d477f1132813bd60cca3a4f
MD5 4361703356fa8c674f10ce98a375ccf5
SHA1 a9e0f85f7c3cdbc5e67bd4747f4c5f69c9995bc8
SHA512 dc03ce632a6ff9e2d87829435787fb026b74888c6940d4ad726f79b7158e8009b07b52e24690261bb9321517405a41ba259c000c997cc83beba10cb61831d2df
TLSH
T14DB012104B74C162CE9AB2471D4C93401D401440040E8B080E09D8C04D811D0D2239FC
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MToxNTQ5MzkyMzc0NDphbmRyb2lkOjNjZjM5YmM5NDllMTAyYTU0NDlhYzU.preferences_pb.tmp

Path /data/data/com.PlausibleConcept.BadNorthFull/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxNTQ5MzkyMzc0NDphbmRyb2lkOjNjZjM5YmM5NDllMTAyYTU0NDlhYzU.preferences_pb.tmp
Size 305B
SHA256 8f737f14fb284a68c638286bf6d3fd219dd10209bb8fcb4b05e2f178329604c8
MD5 09758516ac031111f0b257a980bd694d
SHA1 9615065faf042d8b63f06f79781623ee843e8600
SHA512 2e0edb2e4611f0234b177c3311e17b9a79adf7c911eed67dbbaeb6d6a301b9f6cfb82283fae8ad6f98627f6bc35a4a56b3a37719f70b3772b41b8f135e2f1f49
TLSH
T153E07D00DBF11DA01C2F520D3F6801144F3FF3E161B6006938F80180B909505A4C2F0A
MD5 SHA1 SHA512 TLSH

Submit Download

FirebaseHeartBeatW0RFRkFVTFRd+MToxNTQ5MzkyMzc0NDphbmRyb2lkOjNjZjM5YmM5NDllMTAyYTU0NDlhYzU.preferences_pb.tmp

Path /data/data/com.PlausibleConcept.BadNorthFull/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxNTQ5MzkyMzc0NDphbmRyb2lkOjNjZjM5YmM5NDllMTAyYTU0NDlhYzU.preferences_pb.tmp
Size 329B
SHA256 6ed802cd3b55c79230a8b114c96e8fa844e66ae8dfd8bac5fe55d32e71614909
MD5 2ca3801e670494277cd3cf7dfca9d3cc
SHA1 2b4317e289c3f1c83ac4022274cdf746b5b87c13
SHA512 9d35fe6d32a84bd12b9cee849aa8d48adb019d70185907d7e574a1e271b72565b820a271ad55e586acd876246b9f54885c160191e513800e0963efdd314ec99e
TLSH
T113E02000DAF119615C6B530D7E6802144F3FB3D261BA00552CB801847949505A4C2F06
MD5 SHA1 SHA512 TLSH

Submit Download

com.PlausibleConcept.BadNorthFull.v2.playerprefs.xml

Path /data/data/com.PlausibleConcept.BadNorthFull/shared_prefs/com.PlausibleConcept.BadNorthFull.v2.playerprefs.xml
Size 129B
SHA256 9b1958617ed977bb53bcd9f7a16c7bd423e89adf9beb0f60105dfd865d31f141
MD5 6399d119f41e3cb4ecfd9ae569a0731d
SHA1 d166654957e6141d347f00257e195dee8afdc238
SHA512 fb07f7c51bacee3b43db118b7f72a233e8a06dfe6c068dd7dc89595e5ff55b33e8c86d5d821c276d7b2e7d3c76c90ad89fac57518f2ddd7610000c0606cb1f1f
TLSH
T1A9B02BF0D0F46D5259C0080544201A4422753663020838C05C23B4300FA8240026E110
MD5 SHA1 SHA512 TLSH

Submit Download