Analysis

  • max time kernel
    6s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    24/08/2026, 01:57

General

  • Target
    Mugacrypt-1-debug.apk
  • Size 29.2MB
  • Sample260824-cdnm7asbmd
  • SHA256 cbe19a7222bc062fc802d0df9f9d4b5dc726d9812e84c9226e84a051a3811a04
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.jumpgames.rswrb
    1⤵
    • Removes its main activity from the application launcher
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5086

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 66B
        • SHA256 be0872e3269bb81138c18342758a8e0afb3e6b66a61d80c7970e6cff748b0fe6
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 62B
        • SHA256 39ca14c72a0d0730452b61b87421520e34980370baa3ff16615946d735d4854d
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 60B
        • SHA256 faafe03a0722e1b8c53ef5c5d633dd802520ab684d3ac52ea7a55d01d7524783
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 64B
        • SHA256 5999710e8b4ecad3877eafb649154e1c25efa3091fdb61a16bf86566355a88ee
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 52B
        • SHA256 5793fe3bd0491830ed7a3f6ef1674147b7e7a3162098bc2f303989a1196affa4
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 82B
        • SHA256 0417de39762456378c1044d55cb520d191ab93a66b9d0e96bb8c2d2e5b6bc7cb
        • MD5 SHA1 SHA512 TLSH

        kscOppCXxcAA6IPMugacrypt.sys

        • Path /storage/emulated/0/Download/kscOppCXxcAA6IPMugacrypt.sys
        • Size 9B
        • SHA256 296d25842c27d7824bcc49df369732a603a457d9a2e31f5947e35459ba229003
        • MD5 SHA1 SHA512