Analysis
- max time kernel
147s - max time network
151s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/10/2026, 06:38
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
iTrust88_v1.0.0_release.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
iTrust88_v1.0.0_release.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
iTrust88_v1.0.0_release.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target iTrust88_v1.0.0_release.apk
- Size 5.6MB
- Sample261023-hefa4aas3t
- SHA256 fc54433613bc217a2d07b0a1c898c028c191d5817c3cecc622b7ac02ec5ecaa9
- MD5 94ea38331c53bbc1cadd6da1098e411d
- SHA1 86008b87938285217025a83186a327b0bb55c92c
- SHA512 ae545ddc332e014e413f31a69121b75161b0f440835910afb19d9a033ac6497709b08841a4dd540031d80573fb0f3b421566a57a0711c5840a58bf16fc509e4e
- SSDEEP 98304:PoVmr+87jugUm4QlaNEsvw1yk1bZr+k+WPcw6E7JPY8aSvVEiRzo/KrME9A:A/8jXErWFyk5ZB7cNEO
- TLSH T19656F1C6F7E4592FC8774072C96A52F1564B4D128A839F876948371C787B6E80F8EBC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.web4apk.itrust88 - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.web4apk.itrust88 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.web4apk.itrust88 - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.web4apk.itrust88 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.web4apk.itrust88 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.web4apk.itrust88 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.web4apk.itrust88
Processes
-
com.web4apk.itrust881⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5148
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 876e5811a17624b2a2ec22b4615f958486014c40add7e86cb41e244cf1f27e22
- MD5 26e79563d87f1ca7599d31ea11d43d7e
- SHA1 e2cb87564e579991f0c63add7a1ba156d272c4b5
- SHA512 8859cfe4201377e9a4d1e3f4f3a1530c0a2b192bb61c875385e540d4c1a808869b44df79446e48807600e8334ccb7ed4b2adb6629ca9e5839908c96008232857
- SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS4H:8MEX0wIyNjaI
- TLSH T1DF43639D5E3C2221CA7E283ED7E143635B7C93DF5723926239908CF98DC246974358A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 5817b99c05cc5450c67179f29336c34457a1fb40b0bf55ba8db7511ae67d03ba
- MD5 149284acf161cdede564b332ee22ad7e
- SHA1 399e49f6aa775ed86cca709ff3e57a7b8af778c0
- SHA512 c6d1ca6a42d43b34b0ba175514bb90de7a5f46ec0ca43d7d153717b4a2e9f580c2cbd6615856ca3611bba7efc5aff3a284b98d8298481a9832796e7c77358c48
- MD5 SHA1 SHA512
- Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 f403b3530e3cd769a8d13c563d07a472d28aaf6a9b7c3e739c8affd679603f56
- MD5 dfff063de52e7fdeb475a1bd31b0dc83
- SHA1 a909557f56c425fdc9e1d6655bae780da0c2c4d3
- SHA512 ac78874f8900ceeae585f4d41fee65ebc61c101ccd78a34dc39bebe9cdce6b047c828cec64e208ee9052407b8be11bedd7a7f0e467de8bcbc84ef28c800ae8d1
- SSDEEP 6:7+/l9kn1jg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK0:7+tIqLiuWdwRmBEyPbj
- TLSH T1E6022289F3810822C81916B794D483400D00E7198169CB9715640C983C034CCA4A0D88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6027fcf161dd285bc479fc2edc82c08928c648cd0a109574301ab1afc0617e6e
- MD5 742edf3ea8281468de1405e46b84ac95
- SHA1 da6b8fdcdf15f6f2925d4c730e989e7fc1c303da
- SHA512 3de73288682c307d107af1f7d0f5cdcf667da7377237a33680ca6ee10e3af7dbdd7aca536d499a8ab5c063baf270a0eaa5a0da8e9c4209a90354c3e1f211c78b
- SSDEEP 6:7+/l9AdtgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK3ts//Yd:7+tI4qLJdTRmBEyPbwsYd
- TLSH T1710212C96B410A23C51967B790D983952E51AB158273CB57156008AD7C46ACCA8B1E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.web4apk.itrust88/files/PersistedInstallation2826185046746920207tmp
- Size 90B
- SHA256 3623e74f0b36f1cb366d37126d20f970fa791ed6c13aba712e7e5cb58bb55e0a
- MD5 227cd07a2daa5405fa7a90f68848f19b
- SHA1 accddd3e91c67fd20f065ee86d7dba2bfa19c505
- SHA512 d343bf9b2a43193d46d03fa7041151c86da692f7b2deb367429fe380f88ac658f34106f0df940cd1e9fe6d3464e6032ad12885b19d31b2f90f49fdb7dc7711b1
- TLSH T196B012854E708141D4E5E2032C4DA2401E8495403809CA59CE18908041821E19103DD4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.web4apk.itrust88/files/PersistedInstallation9061648763136485696tmp
- Size 568B
- SHA256 db75916feb4cdd2e1242e742f426d8df4e06d44c6c5c7d132429197d1d586784
- MD5 baa96094c509f33ef0a722bc81e121b2
- SHA1 fb034d839d0cfa1d624bac6941f1d808c632c7ce
- SHA512 28997f66469f326799503ad24840f932dccd490f6ff1901d161655a8bc490844ca279adbdbd62c9c47c72a8aed00f60de156f42dc5b3c2c24f323aa234831817
- TLSH T10DF0E19128658A3AFDC95683509CBD821A4C52B5156200A4FFDD09A0DBE35B5510B988
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.web4apk.itrust88/files/profileInstalled
- Size 24B
- SHA256 8371958ca10c669d1c0cee659c86e75206ee97124bc1c8e85974155659aab501
- MD5 68e93156b9e28880e43c332065cc59d7
- SHA1 3191d9c17348a6fd6b79441174742f650e751c94
- SHA512 dc5f6e55f8e8fb5cb90c4490e587c066e278cf4a2f867a10729d03182d5dfc8731ff4f1f991681ba5c8b2a39ef562b352339269e8b6a784304b520b5ac0560a8
- MD5 SHA1 SHA512
- Path /data/data/com.web4apk.itrust88/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 40f048e4ce6a86cac04f05fd250b8752a14ac486c9c2e80736904da9eba1d4fe
- MD5 d26f9a7973a3818e5d6fdc4fb0f74a6f
- SHA1 887f9ac32e38d587d20c395274bb771e28ee4e07
- SHA512 2673d9aa16e2a6e3b6c94af71dafed2bdaba6cbca4f3235b9546a725e1978ba3bf8c0ff8a58c9a5c59db143eea0d71c61c623d7deb521e2685221cd0a3904e7f
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.web4apk.itrust88/primary.prof
- Size 2KB
- SHA256 67905e122f19b3a77aaf516d2ba8698cc74684eabc4ad112a609f46f01265bf7
- MD5 c9ae25f87e08196fe58c5803ade2afc2
- SHA1 3e02f8f8c6e96e2225fdc86ce1a66359e7a6a2b5
- SHA512 2e38aa7d8df860b07a6d83c4e9b2c60f677fe5a9bce04632a07120cd93c2d096cffacd6d2eca100df0dd2826e039c577cdcffa39b68f045c4a3b59c1965f31fc
- TLSH T167511AC009F5DD2977CF025A0876C485CB8F721FC497430DE26C8E95E2AE7654B761AD
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.web4apk.itrust88/primary.prof
- Size 6KB
- SHA256 dbe3591706c976b3acb3b3d8ea13dd1a2d823209953723913a3ee9917ddb5435
- MD5 1fd852fbf45bf1835356e0a9d22e6920
- SHA1 e803b52bbfb040f1a557632c4e5b6749f6c6a1fe
- SHA512 38a30182365cdc3f0377956c631182db1764c4fb4d4ed214e9cbd096c210b3874ad92937e5e5818332021fe15f664be127d743ec19b373971d46bddac051e02e
- SSDEEP 192:lgmFELbT8PqrNPFXpHRQocjYyFVbee3PpVZ:lBFELbT8irNPZpHOocjv/X3Pd
- TLSH T18BD19D63874C0BBA106FC363FC265E9067C942C96B1B266535306466B5CB17D3ECB00F
- MD5 SHA1 SHA512 SSDEEP TLSH