How to find out how I got hacked? Woke up yo 7,000$ withdrawn from my wallet

Wokeup and there’s over 7,000$ withdrawn from my trust wallet. 3,650$ I was holding in usdt, 2k in Bitcoin and another 2k in litecoin.

I know i didn’t click any pop ups, and I’m pretty sure I didn’t put my keyphrase anywhere. A friend of mine knows my phone password and he’s my primary suspect, but the coins were withdrawn with Thor chain. Is there a way for me to at least find the final destination, so that I can have an idea if I was externally hacked or someone who had my phone pass did this?