Analysis
- max time kernel
6s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
24/08/2026, 01:57
Static task
static1
Behavioral task
behavioral1
Sample
Mugacrypt-1-debug.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
Mugacrypt-1-debug.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
Mugacrypt-1-debug.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
Mugacrypt-1-debug.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
Mugacrypt-1-debug.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
Mugacrypt-1-debug.apk
Resource
android-x86-arm-20260325-en
General
- Target Mugacrypt-1-debug.apk
- Size 29.2MB
- Sample260824-cdnm7asbmd
- SHA256 cbe19a7222bc062fc802d0df9f9d4b5dc726d9812e84c9226e84a051a3811a04
- MD5 7f078c5deba4184cb830fa665f723f0d
- SHA1 faae91b9a919a1b0db96ace9b283a2b98c9ba0a5
- SHA512 23bc79e2108c3b848f522604bea835a5c140e9d20893b47c5b75c069e6e304bd4b179c234942e6e66257decb932dbda2696793589fa8bc15d4e1d38e309566f9
- SSDEEP 393216:OPUzK0ca37sMJdyrgacadeuN87vv13uFnCPw5Yv3upJXTx+Rv13uFnCPwPv3upJ+:YUzK8VJQrQgh8qd0IZ
- TLSH T13D67BE02FB194836D9EAAE7451AB433176362D55539393D71A08F6282DB32F88F7D3C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
pid Process 5086 com.jumpgames.rswrb - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.jumpgames.rswrb - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.jumpgames.rswrb - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.jumpgames.rswrb
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 66B
- SHA256 be0872e3269bb81138c18342758a8e0afb3e6b66a61d80c7970e6cff748b0fe6
- MD5 114407050f988783decde9617485e104
- SHA1 0e131fa0c01b862c155cf464f57fc28ca0c62e84
- SHA512 5cfee5aac8ff068e958d2592b13c02f4da93471c264c48b14bf54121ced0d44d0338d96b3c713c6950b25ace07a83486ad72b453d00609bbf4938be5a8bb2cb6
- TLSH T146A022EB00E88F3080C080CEB00AB0233B883888300080000B30228020083800F3AA22
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 62B
- SHA256 39ca14c72a0d0730452b61b87421520e34980370baa3ff16615946d735d4854d
- MD5 a9d2778de5410ecc1cd49d474672a98d
- SHA1 4dd3f25fa2fbd1d8110c38e469b5454533487a4a
- SHA512 a2496796bb647d30cfcd95922e3938184e5f4df4b015295f3c96a1ba77b2e688299d315c71bbb9595e5d288cc3dc6d1586edaafa4ce04be64c2e0a5ffabc3f91
- TLSH T1ADA00279E4F02B341895806DB103B41A3644F446C456980302383496D0E5C9388A3121
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 60B
- SHA256 faafe03a0722e1b8c53ef5c5d633dd802520ab684d3ac52ea7a55d01d7524783
- MD5 5aa0b89a2473e60977f07cd763a20cf3
- SHA1 27044a7507aa1fa61b3e770dbe21e5d8b29026a3
- SHA512 884942740180fa46999db89e0d9f7c2223985204064cba67f25de55dac9423f4fb1611b6faf3ee6c9ceb4fb58d994b62f78ab1a140a466fe8d3e56c6eb72a65a
- TLSH T1AFA0020541A81D7549721AAB71CFE522380474142096651B05124901E2C5D8584F1334
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 64B
- SHA256 5999710e8b4ecad3877eafb649154e1c25efa3091fdb61a16bf86566355a88ee
- MD5 6dba40d2c081671fbd1db9282b2da3ac
- SHA1 591f942e191888d723be3a95d7fc5cac581e9bc6
- SHA512 fbd1c38575674bb3c202a4c45714f9333de4b5082a3ae87a15bcb3a8c17c128994f3673fcff552f01cbcb450f39b325e346f97a581b44de33e4bd4ebe1c46d54
- TLSH T164A0220002E00CB0E082208EB00F38000B283088300020022A20038320C8E882CB0C2C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 52B
- SHA256 5793fe3bd0491830ed7a3f6ef1674147b7e7a3162098bc2f303989a1196affa4
- MD5 38a017e7447eb6578abe6c58d973facd
- SHA1 b8fe21cea71d9da8a8b5f77d579c43331de8d4b4
- SHA512 8850fad3c846ade90574d337a007663578e06e2bc9d9377ada1de807855b6c4a82397fa244ad80911ccbf03cfea4d9ad91fd86b2a36a4718b2166cdd75711104
- TLSH T1799002E650E11CA094A1419EF50328E2A5107040460655411732105318EC9590460553
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
- Size 82B
- SHA256 0417de39762456378c1044d55cb520d191ab93a66b9d0e96bb8c2d2e5b6bc7cb
- MD5 40f4da563ec851739586dac3cd85378b
- SHA1 c4ec53c0a4f278a520eede13218b54839cdc1213
- SHA512 06388837960f79d542be465e00aab35dc713df64e8301a46c6a2ccb31efc1a3f232c3ff4fce8005694cc9e897fd48c031d7438e3dcec180f036def99f57012dd
- TLSH T18CA0123000F449240C8050AD701E703716857814301368510A700002A444E451465A10
- MD5 SHA1 SHA512 TLSH
- Path /storage/emulated/0/Download/kscOppCXxcAA6IPMugacrypt.sys
- Size 9B
- SHA256 296d25842c27d7824bcc49df369732a603a457d9a2e31f5947e35459ba229003
- MD5 8528097127acc64feb81c9eba97574cb
- SHA1 9a0ea7d089dc79cb89c660ed1ef6aca0742a7fb4
- SHA512 76e1dcc9e106d0fbcdb24b5b252fe0649c1d89957fed78838fcc648853ffb0e12f36fd807bb10d42b6d465a53c23a237e04d744545dbd5b12c942f8aa0baccef
- MD5 SHA1 SHA512