Analysis

  • max time kernel
    46s
  • max time network
    153s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    24/08/2026, 01:57

General

  • Target
    Mugacrypt-1-debug.apk
  • Size 29.2MB
  • Sample260824-cdnm7asbmd
  • SHA256 cbe19a7222bc062fc802d0df9f9d4b5dc726d9812e84c9226e84a051a3811a04
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.jumpgames.rswrb
    1⤵
    • Removes its main activity from the application launcher
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4304

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 66B
        • SHA256 10f3d6f5a86a03b7fb22600e51b06bf62195e5cbba4cd98af75a499b890324a2
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 62B
        • SHA256 44eab3e632d702616b40da81507182d92e68ecac9ce5049d91c98dfb2acb9e0a
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 60B
        • SHA256 a20208cbc0d11062bec4b9da083d0e13123f2f6636d9a1719d0e6e133fe20c42
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 64B
        • SHA256 18a344fd902bdfca270f103dcaf45e92ab8d3ca00caed1d37eff88ddbf98ed6f
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 52B
        • SHA256 b4bd17e8ff317c33614bf3a7cd478e4e23acfd7a9eea182cf5dfde810cbf8b9e
        • MD5 SHA1 SHA512 TLSH

        encryption_log.txt

        • Path /data/data/com.jumpgames.rswrb/files/encryption_log.txt
        • Size 80B
        • SHA256 499002dd031eed6db56dd1b070cf0eab8efc8bb6b21ee4c274d5fe4e95b5923c
        • MD5 SHA1 SHA512 TLSH

        a4bRMCvMugacryptfnEGyu.tmp

        • Path /storage/emulated/0/Download/a4bRMCvMugacryptfnEGyu.tmp
        • Size 9B
        • SHA256 296d25842c27d7824bcc49df369732a603a457d9a2e31f5947e35459ba229003
        • MD5 SHA1 SHA512