Pithus

Try a real life example of Pithus on TryHackMe: Android Malware Analysis

Search by fuzzy hash

See an example of report.

Results

Version: 10249321

First seen: 2022-08-05T23:24:07.595504

Attribute: certificates.fingerprint_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Attribute: cert_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Threat level: Moderate Risk

Version: 10242261

First seen: 2022-06-22T03:04:22.721247

Attribute: certificates.fingerprint_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Attribute: cert_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Threat level: Moderate Risk

Version: 10218297

First seen: 2022-05-09T22:35:24.014874

Attribute: certificates.fingerprint_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Attribute: cert_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Threat level: Moderate Risk

Version: 10215957

First seen: 2021-11-10T05:42:05.319898

Attribute: certificates.fingerprint_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Attribute: cert_sha1

423e4cf90dfcb0910c88e8f1276e747ec72992e1

Threat level: Moderate Risk

`md5`	Sample MD5 `md5: 3acab2...`
`sha1`	Sample SHA1 `sha1: 3acab2...`
`sha256`	Sample SHA256 `sha256: 3acab2...`
`uaid`	Sample UAID `uaid: 3acab2...`
`permissions`	Requested Android permission `permissions: *.internet`
`java_classes`	Defined Java class `java_classes: "Lcom/amazon/device"`
`features`	Requested Android feature `features: *camera`
`handle`	Application package name `handle: fr.meteo`
`app_name`	Application name `app_name: Google`
`domains`	Found domain `domains: google`
`cert_md5`	Certificate MD5 fingerprint `cert_md5: 3acab2...`
`cert_sha1`	Certificate SHA1 fingerprint `cert_sha1: 3acab2...`
`cert_sha256`	Certificate SHA256 fingerprint `cert_sha256: 3acab2...`
`cert_issuer`	Certificate issuer `cert_issuer: google`
`vt.malicious`	VT detection `vt.malicious:>1`