Analysis

  • max time kernel
    35s
  • max time network
    153s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    05/06/2026, 19:56

General

  • Target
    com_maquinista_v1.0.9.apk
  • Size 20.2MB
  • Sample260605-yn4ytaev6m
  • SHA256 187b6621217e6a3bf4b6420d7c2acfab29008c1f1661a49b2f9c85acc6a9bcf7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.maquinista
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4746

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        10947d550549f29e09834cab4acdfcf833bb3f811fbf86f1596423e4a6bee5ec.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/10947d550549f29e09834cab4acdfcf833bb3f811fbf86f1596423e4a6bee5ec.0.tmp
        • Size 76KB
        • SHA256 65ef82bf31ce8810335c03e88d6554e50014457b76a724948a84fe392eb58d31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        193c1955b85977cc585809328f60c0b1bf4dd051f98bff1d08f216fe04c4e02f.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/193c1955b85977cc585809328f60c0b1bf4dd051f98bff1d08f216fe04c4e02f.0.tmp
        • Size 39KB
        • SHA256 45c44a15df921953ec04c50f8315382de306f3cdfb2a8f7fe67848611020a85e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        247742c6508910244d24d0d1d00f7fb19d2e06e1ce5ea759e68ce95053720a1a.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/247742c6508910244d24d0d1d00f7fb19d2e06e1ce5ea759e68ce95053720a1a.0.tmp
        • Size 34KB
        • SHA256 cf895feaf6e23fcaa15f5944cc2bc349d6b9b9019a570ce65c4072d458bed928
        • MD5 SHA1 SHA512 SSDEEP TLSH

        857a00fc58cb82a1e313ea57e8d26d1df4440842863eb1c4eeba46c8f0e3a688.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/857a00fc58cb82a1e313ea57e8d26d1df4440842863eb1c4eeba46c8f0e3a688.0.tmp
        • Size 94KB
        • SHA256 8f09dd6b65849088a6b8dc9cfe508dda8f4d005c73a113532904a0c5682a0dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        85dfa1a3bdcb08d212e382cb5dcf1ca9ac348edae01401d1ecee3b4d0d9469f6.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/85dfa1a3bdcb08d212e382cb5dcf1ca9ac348edae01401d1ecee3b4d0d9469f6.0.tmp
        • Size 66KB
        • SHA256 900615046993815e053e33dadbf96592cf3079d68861e95ad2cc4f5e53371539
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c3b0b8cccf5617f720a3c044fd3410ecded29ba2054680693f278dd0292c21f0.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/c3b0b8cccf5617f720a3c044fd3410ecded29ba2054680693f278dd0292c21f0.0.tmp
        • Size 30KB
        • SHA256 1738312060da1984dd0a49b2a8dc21d45888804095f33e6195aba1486a87bd58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c74b6fa4c4fa43eee8ff954c4988033290d04bfe12d92779253a74107f3412c2.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/c74b6fa4c4fa43eee8ff954c4988033290d04bfe12d92779253a74107f3412c2.0.tmp
        • Size 16KB
        • SHA256 eac4d7dcd31c7dd025acbb5a6af8d39bd9f24f81cd7dd63c38cfd5b2dbd74be8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e3f2b44294f4e259096dc1fd89af737abb66c5c5048fb9cf7072681d6039325d.0.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/e3f2b44294f4e259096dc1fd89af737abb66c5c5048fb9cf7072681d6039325d.0.tmp
        • Size 42KB
        • SHA256 518c57eef4ab889fc9926d3d18480d5cacc5679c1aca0fe5c64e668630829023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/journal
        • Size 2KB
        • SHA256 d1c5ea99920cf6a64d1ffe0472d29912147a238264bf4560e5c3d87e54e1b82a
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.maquinista/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 3e59b68a86e2b87729d715c8d38ba0aa047225e6165e99d79cb7ce2e38e29948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 2eb5599d53b25a31ac6b8e7fb203ba73d340513b72afe1ce893cc3dbd4090064
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e6d97a00cf8fd9de1d5742c381edc620d4a85da6f8539ef3084542c4ce58f7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 7b1eddb7692da2a0d1eb9eae500fa545475c1a3e0fc4254ba6def5096f547019
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 2a8b0a497ba9800a97f379eab40fcaa41d49bec0433972376900518f046ff61c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 575d07e9f7479f2a8a16d053fb855f3fc114d63f4cf576511d9cb35859c4620a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.maquinista/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 e04e58c0bf995f2da8a16df4f245d511600fba85c3b84bcafbeec3c3840f89a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9eec944f05e4a211c2de3ae77961ccd2bc7e81aa8ec7cb34644c2d094d5dd513
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ab09318c46a26d3e553f5811917ed4de53f197a7cafc8d21bc33cdd084c6c037
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9e67c1df3df8ad4f0fa0d84c0379905e02345cab0caa82ecaf3b25dac38310be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0a999dcb8671407d3c92394bb0c869af6ab56e0bb1d4c519b499069afb12dc0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1cee588e55cd68c3b66ea899c255d178561de5adef28abc58d0d30190540445f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 4fc3a697739950183b3aaada6cf72f51be569739878fdaae6f50ff7b2c822bca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cee6dcc1b39eb3bbed42a8619d8f2725f3e03c81a3d151f3540502f04fcba4f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 52d101469fc7caf410823fbb8489ab0622caa75282d6cdf4b5f577becabbb46b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 18b46c562217bfe2911c1c77931ac8f6b16358bc56a2f01ca773973c42c77a20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 906cbaa27842a1fb0c1c15123aa5154e6599f63a0823e6a21b56553f0a7545ca
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.maquinista/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4da1a25563193248f6fe535f178c5d3c140a0d7941647ed02b7baf0615164636
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation3147091208476506380tmp

        • Path /data/data/com.maquinista/files/PersistedInstallation3147091208476506380tmp
        • Size 568B
        • SHA256 ed65fb8124a3729bfd910d7ac0ac9cc75aaa32edb5e9ceb52225a06d1a7c5afa
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7288303794052660997tmp

        • Path /data/data/com.maquinista/files/PersistedInstallation7288303794052660997tmp
        • Size 90B
        • SHA256 a67ddd7e109d17b6f21f7f833be793be22f35b36a66eeecc8e01f8e40efb2fea
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp

        • Path /data/data/com.maquinista/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp
        • Size 343B
        • SHA256 a25ba602b68805fd2bce46f32a7c2c5a78a72d46d6b4df78e79b9bc1c3c09907
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp

        • Path /data/data/com.maquinista/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2NjIwMDg1NjY5Mzk6YW5kcm9pZDpiZTIwMzRjNGRhZTkwYzdhN2RhMjNl.preferences_pb.tmp
        • Size 367B
        • SHA256 5b21466841edf2b00b17602f3086752d3cafbd5abf4f021fc1f957c2cec68b9d
        • MD5 SHA1 SHA512 TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.maquinista/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 e95c3a881261b0de71d2bb1472fb72dcadc126325f02d023dd57753b8eed9ef5
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.maquinista/primary.prof
        • Size 4KB
        • SHA256 f0c3b94bc63ccd85ddabb0732844083f91d13be224533de76a2da7c57498d752
        • MD5 SHA1 SHA512 SSDEEP TLSH