Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    23/10/2026, 06:38

General

  • Target
    iTrust88_v1.0.0_release.apk
  • Size 5.6MB
  • Sample261023-hefa4aas3t
  • SHA256 fc54433613bc217a2d07b0a1c898c028c191d5817c3cecc622b7ac02ec5ecaa9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.web4apk.itrust88
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5148

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 876e5811a17624b2a2ec22b4615f958486014c40add7e86cb41e244cf1f27e22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 5817b99c05cc5450c67179f29336c34457a1fb40b0bf55ba8db7511ae67d03ba
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f403b3530e3cd769a8d13c563d07a472d28aaf6a9b7c3e739c8affd679603f56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6027fcf161dd285bc479fc2edc82c08928c648cd0a109574301ab1afc0617e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2826185046746920207tmp

        • Path /data/data/com.web4apk.itrust88/files/PersistedInstallation2826185046746920207tmp
        • Size 90B
        • SHA256 3623e74f0b36f1cb366d37126d20f970fa791ed6c13aba712e7e5cb58bb55e0a
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation9061648763136485696tmp

        • Path /data/data/com.web4apk.itrust88/files/PersistedInstallation9061648763136485696tmp
        • Size 568B
        • SHA256 db75916feb4cdd2e1242e742f426d8df4e06d44c6c5c7d132429197d1d586784
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.web4apk.itrust88/files/profileInstalled
        • Size 24B
        • SHA256 8371958ca10c669d1c0cee659c86e75206ee97124bc1c8e85974155659aab501
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.web4apk.itrust88/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 40f048e4ce6a86cac04f05fd250b8752a14ac486c9c2e80736904da9eba1d4fe
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.web4apk.itrust88/primary.prof
        • Size 2KB
        • SHA256 67905e122f19b3a77aaf516d2ba8698cc74684eabc4ad112a609f46f01265bf7
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.web4apk.itrust88/primary.prof
        • Size 6KB
        • SHA256 dbe3591706c976b3acb3b3d8ea13dd1a2d823209953723913a3ee9917ddb5435
        • MD5 SHA1 SHA512 SSDEEP TLSH