fc54433613bc217a2d07b0a1c898c028c191d5817c3cecc622b7ac02ec5ecaa9

General

Target
iTrust88_v1.0.0_release.apk
Size 5.6MB
Sample261023-hefa4aas3t
SHA256 fc54433613bc217a2d07b0a1c898c028c191d5817c3cecc622b7ac02ec5ecaa9
MD5 94ea38331c53bbc1cadd6da1098e411d
SHA1 86008b87938285217025a83186a327b0bb55c92c
SHA512 ae545ddc332e014e413f31a69121b75161b0f440835910afb19d9a033ac6497709b08841a4dd540031d80573fb0f3b421566a57a0711c5840a58bf16fc509e4e
SSDEEP 98304:PoVmr+87jugUm4QlaNEsvw1yk1bZr+k+WPcw6E7JPY8aSvVEiRzo/KrME9A:A/8jXErWFyk5ZB7cNEO
TLSH
T19656F1C6F7E4592FC8774072C96A52F1564B4D128A839F876948371C787B6E80F8EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.web4apk.itrust88

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.web4apk.itrust88

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.web4apk.itrust88

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.web4apk.itrust88

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.web4apk.itrust88

com.web4apk.itrust88
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4735

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

System Network Connections Discovery

1

T1421

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events
Size 56KB
SHA256 9909095533a6569db6ec8477e35808de4002a2efb2d3e3e964d2ac4b290bdbb2
MD5 9b906871a24d72b110e48de6fa07490c
SHA1 fffe33f7522af5438eb5f4d7693449854adb71ec
SHA512 d01632ac491369bca36a23fa51f3565b428aa9f9b2840d6d8be3175fec1be99ff064ff8436f2cd3073234d83f477674c1c45cf7e2faf41edd4a0dcfc2212ca77
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS0:rAMEX0wIyNja0
TLSH
T11D43639D5B2C2221C57E283ED7E143A35B7C93DF572392723D908CFA8DC246974354A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 e1d2c3f54f1b645922d9221e8d92fc8d62599df041401e5b9e066f8483a8c698
MD5 abcdf5c6ff4ba8efbdc9da7abb18ebba
SHA1 c9a50a3c3adf90ff26b5073fb8ee4a3f55e3b0a0
SHA512 3e58c48177b8b3f4eaaa269aa9ec25a84bc5781cf8dce72605a7a20dcc38ebe248d070f5c71d386b73e287c97a62058f2be652c6eee0daadb7b26fee163c5c83
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 7f4fe9a6c2dcfb7e895331b2ef56a805a4ca0c605b4a6cd5bf4021fdf8a0d3fb
MD5 602227a30966c76c987f490370297f41
SHA1 a3e6860520018211653fc823e13d7c338a8fc885
SHA512 3dc7d83036e1fbc40b957318eeb25cba96d38804bce484575dd5c74b67f97587196ee4b40bfbb4d71ef5a571a38dc08f18a0c6b7021f6daa879685dc1390561d
SSDEEP 6:7+/l9Rn1+fg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKWAX:7+tUfqLiuWdYRmBEyPbxAX
TLSH
T11102C0AC63C01813C82D2EBBB0D4C3402D00E7388171CB27169208D87C074CCF4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.web4apk.itrust88/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 488aa43b5291812cba018277171d5f95fb3fe6fbeb7c6f9531e875da157f3dc8
MD5 bd434e4ca39a0e0e4b464b55f2d069e0
SHA1 90efc0dddcd18fe3d6caf3975c3e532f21a1b493
SHA512 7638c9781400bf90c659e2467f6091e9e2d181c20b971cc869c2f3be208e21b1c496f2d44991cd0064b953ca35fc4ef79fd7c2f83d8275d5ef25c6279329867e
SSDEEP 6:7+/l9m9L4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKK/Cp:7+t8RwqLJdeWRmBEyPbVCp
TLSH
T1EC022298E7401A03C82D1B77E0E883411E10A7289BA3CB171AB108A4AC066CCAC91E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation3404001437526022136tmp

Path /data/data/com.web4apk.itrust88/files/PersistedInstallation3404001437526022136tmp
Size 90B
SHA256 f70f58c9c6f1d77df422a081ac99c0f4e55a73bfe0f14572afab912290dd740e
MD5 95d737267854d5bdf8ce1f92c4b6da09
SHA1 d1fe2157d2a86dcfcee5389cceec815a923bd2da
SHA512 b9cec10fc0987d8db75351c7f60044d97f9a1f71be6c2d1b291df4cf74ed5e07ba78b2b095d6bede43f7afa1e4926d392fe0db7d5687769d3999b711487bc5d9
TLSH
T17FB01224973243518999A2132D4C91005E8114424C098A4D0F09E18045D11D08317998
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation3712826755787059841tmp

Path /data/data/com.web4apk.itrust88/files/PersistedInstallation3712826755787059841tmp
Size 569B
SHA256 40b7986d8e829657661289223d4175b9565c6a55f9e05636979dd6e7160afef9
MD5 af92fd67aa248b8390878f01d9304264
SHA1 96f8c87ab7a7dfd80df39de8b80fddbbbf652e88
SHA512 735c913477c5ebda1e975e272c9bc318703c9ef45252983c8f60ebfbbc6933cd2e938af8b5e8f8b416f4462340a9de64729fee480d035fe3ae67741c8502088c
TLSH
T1D8F096925810497851DCD243488C9C043E1980784F1F62F8EDF4CCE25AE17F5034F104
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.web4apk.itrust88/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 93b67c677f9878f05c31cb7d9b59439d869f6120576b74be2350dcbbf7867a04
MD5 cf47d5b6ee28eef410e218d1ac1899f2
SHA1 a903e93a6abd02922ea40a99558ca20a25407d44
SHA512 5e1e8629f7895937764d849344590be874440aab7627a6165b6e558b30a9002948bbcb165acdd2a283bdb7145a9401a107012a291bdf3e8c5ddf912459f9b336
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.web4apk.itrust88/primary.prof
Size 2KB
SHA256 67905e122f19b3a77aaf516d2ba8698cc74684eabc4ad112a609f46f01265bf7
MD5 c9ae25f87e08196fe58c5803ade2afc2
SHA1 3e02f8f8c6e96e2225fdc86ce1a66359e7a6a2b5
SHA512 2e38aa7d8df860b07a6d83c4e9b2c60f677fe5a9bce04632a07120cd93c2d096cffacd6d2eca100df0dd2826e039c577cdcffa39b68f045c4a3b59c1965f31fc
TLSH
T167511AC009F5DD2977CF025A0876C485CB8F721FC497430DE26C8E95E2AE7654B761AD
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads