Overview

overview

8

Static

static

6

config.arm64_v8a.jar

windows10-2004-x64

1

config.arm64_v8a.jar

windows11-ltsc_2024-x64

1

config.en.jar

windows10-2004-x64

1

config.en.jar

windows11-ltsc_2024-x64

8

config.fr.jar

windows10-2004-x64

1

config.fr.jar

windows11-ltsc_2024-x64

8

config.mdpi.jar

windows10-2004-x64

1

config.mdpi.jar

windows11-ltsc_2024-x64

1

jp.co.nomu...pp.apk

android-9-x86

8

jp.co.nomu...pp.apk

android-10-x64

8

jp.co.nomu...pp.apk

android-11-x64

8

Analysis

  • max time kernel
    4s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    07/07/2026, 14:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    jp.co.nomura.nomuraapp.apk
  • Size 21.6MB
  • Sample260707-rdnerabt4y
  • SHA256 6ca0c23f90ae6397eec301bcacdee2e3e5dcb7f5ceec618c92e9a43bd3e3dec7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • jp.co.nomura.nomuraapp
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:4321

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 15d4bf4be4cc2a83da7629f209582be96caa487682165fb4d39ea752666c906b
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/com.google.android.datatransport.events-wal
        • Size 144KB
        • SHA256 ed6c25c58296741d7a67263b655d671d113191dc7ede87efd77eec2b31cabbd1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 28cec2c3bf2c6f9e17b3742db4b28ced4e7632cfa1aecaca9267ee2f39de36c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 079307e0c640a2b3369ae37f610c3a82a3c7eb158192b366985d09fb3c4fca9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cf0a7c2b63d8b20197f3a3f690f58eb34e566e545b72d109fa1b7fe80ef37c58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 42d38b53f915264f1a9a0321312f04323d3049c64e30a1d24678d0f932b8c816
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ff8e9595f3b7b6ba516bd539865623de984bdfee73cf42c83d9ce74b6290cc8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 64990ec894002621276a15da2a5e0b9e7c13af04f0da13272602600f1795c503
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 7f6aa51f69c8e2ab2ce940c13b07e5baff53e253abbd0222ece450119ec4fdaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 cac0a01adcacb418b383ff5a53cfbb5d22cc7f088192ec90d785df1846ab2357
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 22b8192721133ec67ff1b83ae9fe102ed9c181ddbd318305ef983b769488184d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 c19b24c6fce9c0b8b353bbe1abfd0827739c447139d8a76f98ddf1b0a0c51f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 58a4bee36b79753caaf56b7cebf8385a5cd130f7e33536fa185e1cb5f46875d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        krt_cache.db-journal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/krt_cache.db-journal
        • Size 512B
        • SHA256 6946a476988d80dc17f6d46d3623d4a1c0dadc19ab43fd6e0ebdbd9cf8cef8a7
        • MD5 SHA1 SHA512
        Submit Download

        krt_cache.db-wal
        • Path /data/data/jp.co.nomura.nomuraapp/databases/krt_cache.db-wal
        • Size 68KB
        • SHA256 4427dfb50caf80f8d44b4432a1ea54d1c45098796385e521e92ced740100bd41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/com.crashlytics.settings.json
        • Size 771B
        • SHA256 59252f7652540d507fffcdf52d245d90523449f7611e7c5d3f4e598975585642
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000000_
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/open-sessions/6A4D07D302DA000110E171B72CC94CA4/event0000000000_
        • Size 46KB
        • SHA256 9a5f26e790245f32ea92d56a062faf85fa0a14d1ccedfb3c08ea93acca9837c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        internal-keys
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/open-sessions/6A4D07D302DA000110E171B72CC94CA4/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/open-sessions/6A4D07D302DA000110E171B72CC94CA4/report
        • Size 839B
        • SHA256 a59e8bb5fbab6ed40770aec83bb6b1ebf703201445d09dd3721869b14cae88ca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/open-sessions/6A4D07D40312000210E171B72CC94CA4/report
        • Size 839B
        • SHA256 985bcfa886655a679d737f810a5f28c1d1dc0b45a9a2f2f1deff2f7362c10bb4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A4D07D302DA000110E171B72CC94CA4
        • Path /data/data/jp.co.nomura.nomuraapp/files/.crashlytics.v3/jp.co.nomura.nomuraapp/priority-reports/6A4D07D302DA000110E171B72CC94CA4
        • Size 47KB
        • SHA256 34ea2892a6146868f9c66fc9ed6320a3bfb34f376a21e3cb897ee8ff51d2b4cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation6331743497911301487tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/PersistedInstallation6331743497911301487tmp
        • Size 569B
        • SHA256 5459422db89d7bd3cfe013938c3e501b03788ced3f117f8a615d016454ddd501
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6794869813496119867tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/PersistedInstallation6794869813496119867tmp
        • Size 90B
        • SHA256 86803751ea9221e9b2d5640e76bd488d6ceadc15982e69a06d89f001c2dc44a1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/datastore/firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/datastore/firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/datastore/firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/datastore/firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Path /data/data/jp.co.nomura.nomuraapp/files/datastore/firebase_session_anAuY28ubm9tdXJhLm5vbXVyYWFwcA==_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 ca79101caf1880bde04a8136e2f572c9d390cbb9b17ee7d28387ac567eb01ff5
        • MD5 SHA1 SHA512 TLSH
        Submit Download