Analysis

  • max time kernel
    36s
  • max time network
    157s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    05/06/2026, 19:56

General

  • Target
    com_maquinista_v1.0.9.apk
  • Size 20.2MB
  • Sample260605-yn4ytaev6m
  • SHA256 187b6621217e6a3bf4b6420d7c2acfab29008c1f1661a49b2f9c85acc6a9bcf7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.maquinista
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5055

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        10947d550549f29e09834cab4acdfcf833bb3f811fbf86f1596423e4a6bee5ec.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/10947d550549f29e09834cab4acdfcf833bb3f811fbf86f1596423e4a6bee5ec.0.tmp
        • Size 76KB
        • SHA256 65ef82bf31ce8810335c03e88d6554e50014457b76a724948a84fe392eb58d31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        193c1955b85977cc585809328f60c0b1bf4dd051f98bff1d08f216fe04c4e02f.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/193c1955b85977cc585809328f60c0b1bf4dd051f98bff1d08f216fe04c4e02f.0.tmp
        • Size 39KB
        • SHA256 45c44a15df921953ec04c50f8315382de306f3cdfb2a8f7fe67848611020a85e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        247742c6508910244d24d0d1d00f7fb19d2e06e1ce5ea759e68ce95053720a1a.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/247742c6508910244d24d0d1d00f7fb19d2e06e1ce5ea759e68ce95053720a1a.0.tmp
        • Size 34KB
        • SHA256 cf895feaf6e23fcaa15f5944cc2bc349d6b9b9019a570ce65c4072d458bed928
        • MD5 SHA1 SHA512 SSDEEP TLSH

        857a00fc58cb82a1e313ea57e8d26d1df4440842863eb1c4eeba46c8f0e3a688.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/857a00fc58cb82a1e313ea57e8d26d1df4440842863eb1c4eeba46c8f0e3a688.0.tmp
        • Size 94KB
        • SHA256 8f09dd6b65849088a6b8dc9cfe508dda8f4d005c73a113532904a0c5682a0dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        85dfa1a3bdcb08d212e382cb5dcf1ca9ac348edae01401d1ecee3b4d0d9469f6.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/85dfa1a3bdcb08d212e382cb5dcf1ca9ac348edae01401d1ecee3b4d0d9469f6.0.tmp
        • Size 66KB
        • SHA256 900615046993815e053e33dadbf96592cf3079d68861e95ad2cc4f5e53371539
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c3b0b8cccf5617f720a3c044fd3410ecded29ba2054680693f278dd0292c21f0.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/c3b0b8cccf5617f720a3c044fd3410ecded29ba2054680693f278dd0292c21f0.0.tmp
        • Size 30KB
        • SHA256 1738312060da1984dd0a49b2a8dc21d45888804095f33e6195aba1486a87bd58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c74b6fa4c4fa43eee8ff954c4988033290d04bfe12d92779253a74107f3412c2.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/c74b6fa4c4fa43eee8ff954c4988033290d04bfe12d92779253a74107f3412c2.0.tmp
        • Size 16KB
        • SHA256 eac4d7dcd31c7dd025acbb5a6af8d39bd9f24f81cd7dd63c38cfd5b2dbd74be8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e3f2b44294f4e259096dc1fd89af737abb66c5c5048fb9cf7072681d6039325d.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/e3f2b44294f4e259096dc1fd89af737abb66c5c5048fb9cf7072681d6039325d.0.tmp
        • Size 42KB
        • SHA256 518c57eef4ab889fc9926d3d18480d5cacc5679c1aca0fe5c64e668630829023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/journal
        • Size 2KB
        • SHA256 270277f0c63aee91ef53a8abd079df0b9ec87d343e8c59cf7c3b59e2e1ff6457
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 4c1bb054963698cbc7d31a9b9ba22423ba16b60eaac58b72545512ef0e718e41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 84a467ce4283c3be48fbaad4de9d189a5f8c6710451e12f650f749680f3c65d7
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e43001190b9d611deaa2d36d5f4040559eff450d84289584445d0c4f5364a34e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 726209d5503c4529b257db7e277b052566d3ff7646bb325567af49854e2bc935
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 d0c4ac28faf2203e656459320dae0aca888617e78eb40f9d216d7ad266f68645
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 5d5a1e823e33608a1f1d76a4dc36cc0b15f766903bc5c43b2a77f6a6cfbe0846
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 336f36b6c765dd165b3757a06a82593b00964b73608c63598e9dac1f92ee1e54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 073a88f373d29fba1ca33593be79912effefaad8332f45f83a290f3cd8529fb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ea550fef501597a7b4c13dfecc1856ed2e76bfdad7f920daa9c74d3353182004
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 69fc9cd474a83970cad03a22a76163f8db3dafa93517bb2a5786dbba8b942b47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8d44376ba04cb59353e8be6e57b6674f6ffc9191584c788033467b92097c66e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4a8b78ec06fa8f5500d58f0b8149b08394679ed863ba4e4820494e2c4a7be8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 0bb9e65ae338ba7d4e802ecb24c84d06044c7c4891091916769ecf69e08d46bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d00033727afc46fa3be269cfba65aa297d6a904924219f0e59296a1d1775aa59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e5452761a72729a51d77877de4e74c70234bc67a36590a388e19be172db98f4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4dbb90cf9849a7d812b914196b1195037cc7da11d8be6e1dcc5504b3d18133ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 b27cab00e0cbbb46616052242612d6583c5afcd7d2687fe5479a8a3c198a6ccc
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0ac6b05b5301529a37f36540eb1958d24cabb95f4f12a3ce848e76e4bf22080c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation7758383767738402108tmp

        • Path /data/data/com.maquinista/files/PersistedInstallation7758383767738402108tmp
        • Size 570B
        • SHA256 580b544549b102bff922297af4de938dc22bb3470f01f486db50e584bf2f3fc5
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8043508046112741838tmp

        • Path /data/data/com.maquinista/files/PersistedInstallation8043508046112741838tmp
        • Size 90B
        • SHA256 5eddb420c907a20484aca563681bd4c3d5d6205312a36f62da8a63aa54d1ea02
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp

        • Path /data/data/com.maquinista/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp
        • Size 343B
        • SHA256 f5c6ef97f56baeb2ba2339c9ef165c784ad45814591f4871193086d5c492dfa7
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp

        • Path /data/data/com.maquinista/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp
        • Size 367B
        • SHA256 0358a259c50c2b53eb852c5d49c336b27c9f8af6f5b3d2f46350b69317fdb36e
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.maquinista/files/profileInstalled
        • Size 24B
        • SHA256 2cc67b5e5f84e66c5bc5c873c26b031d6d8f3698f94fc7b8d2d818e3006e82b5
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.maquinista/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 0d10c2a45997058498bd2f54898827ded4a7145e98b1148a2f48721de2fd889f
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.maquinista/primary.prof
        • Size 4KB
        • SHA256 f0c3b94bc63ccd85ddabb0732844083f91d13be224533de76a2da7c57498d752
        • MD5 SHA1 SHA512 SSDEEP TLSH