6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7

Analysis

max time kernel
4s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
07/07/2026, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jp.co.nomura.nomuraapp.apk
Size 21.6MB
Sample260707-rdnerabt4y
SHA256 6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7
MD5 645cca7db190283f895c609fe973599b
SHA1 5e8f5c002bfff085347699a8fb04d25feccf5086
SHA512 74c58e0614cc4604638b75454a9cf3f6177a451fe8dccae5483294438676bb62a0740b5abd17d6cc495830e1c873e0a4d4e11b27789e73523e98e13292cd5045
SSDEEP 393216:zYpXN0V9gwsApKW1nbsB4ostheiLgS2YbiRpDNBds/KX:zYp2xfpfnbsSo4gsMv7s/g
TLSH
T10137E147E2174D31C67DBB396DBB479477322984BB032B871048E5B8AD931E0AFC56E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	jp.co.nomura.nomuraapp
/system/xbin/su	jp.co.nomura.nomuraapp

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	jp.co.nomura.nomuraapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	jp.co.nomura.nomuraapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	jp.co.nomura.nomuraapp

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	jp.co.nomura.nomuraapp

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	jp.co.nomura.nomuraapp

jp.co.nomura.nomuraapp
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
PID:5144

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events
Size 104KB
SHA256 862e09e788a1a6b38b350089af84c9a78a03d4442cea02e86210c5b660905bc3
MD5 76c9a715cdc726aa94a56f2991f220b9
SHA1 f3c578e1d1c52cbec4a597bf1c43fd51f4aac123
SHA512 4630ed3eb2e5004fdf5e0086c377f2afd3d8ef4994915c759025d1b730163805301c25c9633311d2992b19e861e8f222630d4c9eab2422dc2f6d4d25db508126
SSDEEP 384:MvpCQBlYABfriJhXaIkx47yBokmr9fVGBw4QBO9:ICibTiJhXaIcBo38Jio
TLSH
T19BA3690F5B30289FE26CDDBB61AB09B75AB706175A4E9A84E049D3190F6CCC072D776C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 b8dd30acfdc1a9ed18ca61f954d81a0c491682c098231805cfb8b1fd3a9ea23f
MD5 302d6107eaf3a311a1be1609a86b0c60
SHA1 5b47c5ef0138506a2dae63ed89e3cc35e67f00e8
SHA512 6f379c532511845747cbab9857e374711147b0f45125d77f91aedef44559334e8b362f4a545c644405f5e16e1569c58897e6ea1b8be0f4e40ef07150dcb0acaa
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 8b0177f6ebb85db52e7a3894b3a5f1168486002cbe26ad9f2f51fbf5cc5b9455
MD5 1ec874d6458909aa38a9088d1c6f5562
SHA1 fadea6fd990e1863c351fb352c730fd547e2a06f
SHA512 dcde7daeabfc3f93d65e6de5c5f7df4143339cd9b3c2a67ca4271f16daf0907db016d928c56e3797ea772efd1e66f87bd6c6411d37c22901dbdc89503447bfa7
SSDEEP 6:7+/l9Cn1Rfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2:7+tkfqLiuWdwRmBEyPbF
TLSH
T1B402229D63811832C81916B794D483840D20E7198172CB0715E308983C8B8CCA4A1D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 28KB
SHA256 f74b70cc0e20e98d2b3bf5c3ca4a72e6fe8998bcab82eb5eaf9a55ca8715dc83
MD5 65a57a003048fd3918fc27d10af91aee
SHA1 bbe6577cddffe1e07c95157652c6575f5e6c81d2
SHA512 e9de5153fe10c7748742b13b92ae1664dc584cc7f55bf1f7e5bdee7b9b059edf4627f9938d96b9d9405570bf3162d1e6472f31517f7adcedb145f015e0c03662
SSDEEP 48:7Mzviqu59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSPT:7YviVMEqzAiwIyNjaPT
TLSH
T1C8D2625C5E3C2221C6BE283ED7E103535F3C93DF5723926139A4CCEA8DC2469B4294BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 dd99c33f5e43625dbd33981298e1585c1ff98544a1cf0b8d067f5c7ca2262856
MD5 6bd3a018041b5cb30d88ff1bb791ef15
SHA1 e84c0ece999b1b6ddc325286d883c2035792af2f
SHA512 671374797e79451e3b71f68b143da10bbf77378ecebfa62dcc2642a7d8947837f60920f9c5c2779766d381eb4de98b964fd6a72e8bab5b064a3979dd1d8d60eb
SSDEEP 6:7+/l9e5OPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKTM/sn:7+tYUqLJdTRmBEyPbHs
TLSH
T117028099A7410913C93E5FB7F0D983952E50E719C373CB57156009D8FC47ACCE894E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 8a4ebaa251fb97954116fea1b60867f49434afa6495fa3e210180a4e9954d8c6
MD5 13995a40e7736aa2320cf1ebede592e8
SHA1 f5f8c8fa08dd02d1eca6042a2fda394a270333b0
SHA512 4f3b4ec98fcb416983f920eca6f277514e94ea080a1702be5f9e60b85aae2ae75a6ec058113e899d7b08dff5fadcb6bbecabfc04a30bb8193bd6d6fd324e545d
SSDEEP 12:TLWuEOe9zmzrfRmBEyPbBvOwhk/0RT/VM/QCzV:TL5epmzr0GSNh/RT/aZV
TLSH
T14D72558EEF20E207E2674736E8CAE3D23D74716A4363C65779900B5C6D8270594A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 1ae035b1a81911cc235f6f58b249be260768763e4195658a63f3f1f4539e16c5
MD5 3e0f570689a8e06ed66ab0cef6ca4d21
SHA1 5f1aa0cbcf5d046729e3921f8bfbae0c7a62543d
SHA512 018aab7481c86d06797de0425a71dadc19ce623828aac2a264f551b39b88d3be91c0eca71ee0e071b79f746e5e62f4c3770d0ba876abe77a6b92e3fe28c2a302
SSDEEP 12:TLiEy9zmzrfRmBEyPbP/3p/0RT/VM/QCzV:TLApmzr0GSP/3SRT/aZV
TLSH
T1187255CEBE209607E263437AA4CBD3D23C20316A4363C9573E500A6C6E8260590A1F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 737b0027552f01049bac253ea3f6d6fce1a6443c3a5c300827b7c3a74cf67c88
MD5 6a00c18cf7947e4df3ac7ea719e286ed
SHA1 d3bc520e895472c314f61dc3dd7ced9054971eeb
SHA512 480b834a41542e1279ce3375536b668951d5c1493e6a4bfc6525263eb0f123ce1d5ffc8d7ffe9d7cf675adfd1525aca419985bea6410c54973bab6f5e5c98b59
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hZt1kn+/0Fl6Mo4p/0RT/VM/QCzV:TLQpmzr0GSP/hZtunlFftSRT/aZV
TLSH
T18972598DBA20D707F267477264CBD3D23C3431659763D65639401B5C6D827815151F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 77ffe5cea1cd2e22f343bd2cbab465fb18603b813ed4c7c22d968e760b8b2107
MD5 a5e696e4a4a3a767886257f634d5840f
SHA1 48734fc13ce2ed6ed85956742f318fa03f25fb14
SHA512 16c87694b4dbf65a3a2e12da52af2546710908489a3ad1c9044587f95f49de04ecd8614b9ab59e65b3e8ecc98eb4bf2f47d32efe9b3fe8f1d26d8e20a6b34290
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/QH49blqYFlokmn+/0Fl6Mo4p/0RT/VM/QCzV:TLEvpmzr0GSP/s499FGnlFftSRT/aZV
TLSH
T1517278CEBA20D70BF23B4739A4CBE3D23C3431621763D2567D051B1C2D827828261F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 035c6119a97ba0453c922b7fc1e91b5ca0cc58eab994fe0c3f7336c9b495b2ee
MD5 6d1d1a8dcac0e0a8fea0a6db6df30793
SHA1 ea40f1b7a1b455f2724b2e4ebf46dc7c6d5d61bb
SHA512 3a3e28d88571d0598f3c61d660a3929ea1547bcca7d9632306c3d610a2a5bb666f5decf81b54b89d8bbf1c19ad0995abb269c43917726d746546ba271d43edf1
SSDEEP 24:TL6Xpmzr0GSP/oL/kXuxPMVKaX499FGnlFftSRT/aZV:T2XArSP/oLcuxU0aI5Gn1i+
TLSH
T1C0722689BEA8DA17F2374B3969D7E7C23C3431660763D6563A051B1C2D837815161B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download