6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7

Analysis

max time kernel
3s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
07/07/2026, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jp.co.nomura.nomuraapp.apk
Size 21.6MB
Sample260707-rdnerabt4y
SHA256 6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7
MD5 645cca7db190283f895c609fe973599b
SHA1 5e8f5c002bfff085347699a8fb04d25feccf5086
SHA512 74c58e0614cc4604638b75454a9cf3f6177a451fe8dccae5483294438676bb62a0740b5abd17d6cc495830e1c873e0a4d4e11b27789e73523e98e13292cd5045
SSDEEP 393216:zYpXN0V9gwsApKW1nbsB4ostheiLgS2YbiRpDNBds/KX:zYp2xfpfnbsSo4gsMv7s/g
TLSH
T10137E147E2174D31C67DBB396DBB479477322984BB032B871048E5B8AD931E0AFC56E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	jp.co.nomura.nomuraapp
/system/xbin/su	jp.co.nomura.nomuraapp

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4802	jp.co.nomura.nomuraapp
/system_ext/framework/androidx.window.sidecar.jar	4802	jp.co.nomura.nomuraapp

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	jp.co.nomura.nomuraapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	jp.co.nomura.nomuraapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	jp.co.nomura.nomuraapp

Checks the presence of a debugger
defense_evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	jp.co.nomura.nomuraapp

jp.co.nomura.nomuraapp
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4802

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events
Size 104KB
SHA256 2d0a7520e603b5588765737898f92416fe9854c0c6deadcb6f1383b990405241
MD5 7ef244b53c9da5f13d1aa76f461192ce
SHA1 bfdf6813ed77eb7d8ae1d0b164d243f81e3711fc
SHA512 10698f749cc75a55b2eda6bdc3d7397a2d1d0e1e71559ac91c95491d6e80514e37dc9d4b76480a91759c30efe855de7eff5ad9ea6b13ef5daa65de8e9c532211
SSDEEP 192:K3yhaEJyYQWGHQFyCZcLXkLDE0OL5FfA2CHgogt6LwYB3gWxf+9IYr4cPLgXYFda:4AaEbQPH8S6XOFoAtWxgaKSCPrTQfv
TLSH
T166A3690B5F342C5FE26CDCBB61AB0AB75AB606175A4E9A84E049D3190F6CCC072D776C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 bee3b07a02e70cbd8d8110ee230c39f27e15f842e7dda0c88a1b992bd2aff834
MD5 195eeb2c18f455060edd849c4a9d98ba
SHA1 27f271ac663ee4052ae583e84a2114152ad1f886
SHA512 a00edd302b4a308f609d772f084728080add1098d20eeef7082f2e6aae4f0bfa1667c1aaa3343cf4d9203069589ff3045d26f2ef328d3d9ac4d61ccf17d6af9e
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 28KB
SHA256 f24da28260312dd73f5be553f0bebff58c18768c24894c8494f9cf79336950ca
MD5 8163b825a6a2c282b89d004b26220034
SHA1 344f4d68f41162fc2f8a500faf534764764e2b74
SHA512 4c0805bb819cf901cbfc245d3ca0776577e3dd3874b75efdb07e6729134c1a03e1fb5a31e850a150f4299804f32a1e7549d989a7b5cbe2a01e81728bdce2b635
SSDEEP 48:7MEL/3qG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPST:7b/39MEqzAiwIyNjaT
TLSH
T180D2725C1A3C2611C5BE2C7ED7E103635B3C93DF572392713EA48CEA8CC2569B0254AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 68KB
SHA256 4f5935d3cb3ff45697527a3765e7a5a95fc35508fb5a31cc3e3d90cc6f30c223
MD5 3c284ee0b9ae7eb90c8593d5c7b57459
SHA1 c1ab8d2b56b2b38ab7d1515215eedcf3e9db677a
SHA512 262d688bc711a9c05c3cbe76895c060602d4848c22a7db6b2617cde5818460c34b5daa8d754db037a061593f95acf4625f790d8231265bc6d796d302ae4f37ec
SSDEEP 384:7uhboaEbQPspSOXOFSEtWxQkoS8PrTQ9vf:JpboIizwPEvmn
TLSH
T1F363780B5F342C5FE26CDCBB61AB0AB75AB606175A4E9A84E049D3190F6CCC072D776C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 3fa8f360d6fe5cd2593fdada49810ca8d1a734fb1dd86c39de952f7cebd331a3
MD5 a820ffa807d1d7606873842754c3e153
SHA1 d58b9b840f1a80cfa108c9a404d6b1fd66fa9328
SHA512 40fd2483bc1f541a592dc29b6c4acc26f5be5c9d252db1199a3d3f7b36a0d8c17bab2733b83155341b7ae15e8350e81c3c640ff093e746d8f07a9386d5c4bf8c
SSDEEP 48:7MzfmSqW59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSXV9jqTq59MENkMwABE:7YNMEqzAiwIyNjaXdMEqzAiwIyNja5
TLSH
T1BC92539D5D3C2311C6BE283ED3E243A35E3C53DF672391603EA49DEA8DC2469B0255A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 bc76a47c2946ae35dccbd7810413e8fdaaa8162d3193c60e73fa61c5663f1625
MD5 261a33ccd800b85ac565868bfebefeda
SHA1 e3df12fe2b320cceac8ee997493d1004f4b02883
SHA512 cd056ad5311b33c71e1ee6dc6a58b7692de2675ceac2d241095f0111b619ce7b5a61f05f4186423e7ea9da5a88a11f09b54575c1c5b293b3549b2825d3fb3926
SSDEEP 6:7+/l99On1vvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKOQEn:7+t0vqLiuWdYRmBEyPbtR
TLSH
T14C02C09CA3800813CD2F1AB7B8D483C00E00E72CC173CB17169008A47C074CCE4A2D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 6b55285182e4d086ffc016572ba3eb3d7fcfe1c072073e829b5036e03f5ab03f
MD5 60ee4f3001b88ea70f7c29198f0216e7
SHA1 14cfd8492259adfc4828d1219513adc0901f45ec
SHA512 4dc59350607d7500477ed219049c7a09eba3b88c7e025f41a7de10e378082ba0611861191f58ce7194d7c26da541225106e4aecb25d8af69ad7d3a0fdf3eebfa
SSDEEP 6:7+/l9bGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKBsC/r:7+tAqLJdeWRmBEyPbdSr
TLSH
T13102C08C67400803C42D1777B0CB83401E10E72893B3CB071E92085C3C4B6CCE890D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 a50b6e8043a163099209e03a7b84403d2efb3f93c9e22db1e7bebca081b21d9b
MD5 df07f45ff8b8823738da61a95c0facb3
SHA1 7ede58ec0c145f779da624a9a556a7effb6dce0e
SHA512 f2f75410c3af6e8944f1c21760ed82140d46bb3bcab4edf3f973400df7e30bf0aa7c5b2dc69c61863dc8fd6a5682ca1cbf282fd02f2394b527242dccf3803fed
SSDEEP 12:TLWuEmO9zmzrfRmBEyPbBvOwhk/0RT/VM/QC0p:TLROpmzr0GSNh/RT/a6p
TLSH
T15B72558DEF20E207E1774736E8CAE3D23D74716A0323D6477A810B5C5D8264555A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 ab61a5cff8a50fc95ef3d2ed2cc1eb8b0031383fed59970b12045cb3a093d7ff
MD5 2ad69b77cad8f4474bd3eecf6e9b89ac
SHA1 13b9df70d2930d75f53089168e991fbf4c21cfb1
SHA512 421ee9b2ea6a07430fcaa068f1a838293a4339e949456518760bddce09115ad35848d17e481d299de189bb2a881d81640994072b5d420d563fb7b4455acf6ee1
SSDEEP 12:TLiEq9zmzrfRmBEyPbP/3p/0RT/VM/QC0p:TL4pmzr0GSP/3SRT/a6p
TLSH
T1387255CDBE20D603E277433AA4CAD3D23C24316A0363C9473E400A2C5E8264591A1F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 9a7bf4505a262c6444dc2110f9d0a4285ddd7f8947bfd6783f02738578d4f755
MD5 87956efeba410b439ed8f30153d98208
SHA1 48d1638053b9a092a7c13d81facd7ec7ba4f707e
SHA512 385a92e7ef1846bc1df4fa7e73ef4e14a6e83aa18248a953180e7f32dce48d3466b4bbe563be40fee2471912e4441cbffb21bbbe0f521c3200c05377709ba280
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hZt1kn+/0Fl6Yyo4p/0RT/VM/QC0p:TLopmzr0GSP/hZtunlFUtSRT/a6p
TLSH
T18772528DBB20DB07E2774732A4CBD3E22C38316A8723D6563E401B1C6E8268151A2F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 6327708b41d6a3a6c57ca94f120d36f90e96d5d41a2d533571879ec4efeb0dc1
MD5 a56f60b1681bcfcb5046d842b5686148
SHA1 c62032289c2796db61795364045db7f73af256f3
SHA512 46c3ef4c8932d7e68dbc21caf35928b27ce31600075c46ed4c06868adf44028623b28643ff8d038cc47197c46b4ff8abcb81b5dba1ac01df5a187634af0de6b6
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/QH49blqYFlmkn+/0Fl6Yyo4p/0RT/VM/QC0p:TLYpmzr0GSP/s499FBnlFUtSRT/a6p
TLSH
T1D57244CDBA24DB07F2374B35A0CBE3E23C3431620323C65279011B1C1D827828261F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 eb0c53ed1e8e0f70089a52a6c0d4553d436a7d19f3a12de65443c29e536eec96
MD5 0f44ae7c1c98baca6370fe718731e0d2
SHA1 1b0554fafd0b5f246da5404cd467b02665939358
SHA512 a5cb7560ce5ffcca617259a313ef898c8369c85dbd08988571b1b672f7d5d5c21ae8b2a6633e2cf2e8df867007cecd7667e57b4d219b1827311dc3e8d3469cf5
SSDEEP 24:TL6vpmzr0GSP/oL/kXuxPMAKLX499FBnlFUtSRT/a6p:T2vArSP/oLcuxU7LI5BnSiN
TLSH
T19B722289BFA8DA17F2374B39A5D7E3D23C3432660317CB463A011B1C2D83781A261F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download