Mobile threat intelligence for the masses

Try a real life example of Pithus on TryHackMe: Android Malware Analysis
Search by fuzzy hash
See an example of report.

Results

com.android.systemui
b1ccec8230bf0d3b4daa43bdbdab63dc83abbe5f09916f767e9f08a1ece01771
System UI
Version: 31
First seen: 2022-09-24T20:28:03.468024
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
me.blog.korn123.easydiary
7b326e186e017c25b4685e4c22704e9bf735c7df5412301a7bddeb4727b23791
Easy Diary
Version: 280
First seen: 2022-09-24T18:20:29.491304
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.google.android.as.oss
220085afd4573d84bf163831e7eefd508ed1490a45cfa950f26e952dd5caf4ae
Private Compute Services
Version: 1182
First seen: 2022-09-24T15:11:22.754207
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.att.callprotect
2134787cb1d6f9d00f7d91b0844527c733c0b7d3cf35fed02db28fa1f06c7e9e
Call Protect
Version: 327000
First seen: 2022-09-24T14:56:25.003365
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.att.dh
01ad9c7a0a42367fe7c5b376cc15aaeb7369bf1772fbbe74bc25fb572641ba1a
Device Help
Version: 210310501
First seen: 2022-09-24T14:50:53.510526
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: High Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.termux.tasker
004d199b156e876b9d73362aeabcb3d6b758b527d69fb17d6bb22b29bf3c5e70
Termux:Tasker
Version: 6
First seen: 2022-09-24T03:36:11.316470
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Similar samples:
com.tombursch.ki…
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Similar samples:
com.seenuvasan.a…
com.iakmds.libre…
com.trisven.safe…
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Similar samples:
com.tombursch.ki…
com.trisven.safe…
com.parsmobapp
f6b4ff4da78494c215219db5806078f1ca17adad837a244a3ba258a45e9ba87d
همراه بانک پارسیان
Version: 200011
First seen: 2022-09-22T08:55:48.851752
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.xaviertobin.noted
c2baa007e96d7f8ed27dcea52383ddccc747203d9f2d75959f409ab88e830967
Bundled Notes
Version: 87
First seen: 2022-09-21T02:34:21.691443
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.plexapp.android
08d25e9cd5bfa11a348decd7c9e576f40eb9230b458bcd6d94c78ecc4597ccbb
Plex
Version: 847812944
First seen: 2022-09-20T16:31:58.293114
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
net.onecook.browser
c769735e47bf2e74d3f2dbac300e4a8b7713fb16a6471726437a5da74b9af8d0
Stargon
Version: 143
First seen: 2022-09-20T12:51:44.164524
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
info.plateaukao.einkbro
f3315d547be5f3cce7b129b5c5d46f50a7d42e271627e4a2843f5a677e92d894
EinkBro
Version: 90700
First seen: 2022-09-20T11:21:55.305924
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.trisven.safenotes
c754226ca1938f3377d805a1209c58b236533209105bafe2c36c809db49aff06
Safe Notes
Version: 3
First seen: 2022-09-20T11:09:08.835128
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Similar samples:
com.seenuvasan.a…
com.tombursch.ki…
cz.zdenekhorak.mibandtools
8378e2fce443fd278e8ba9cd5e68678324bae0d3d0a03f499bf831670aa9db80
Mi Band Tools
Version: 600
First seen: 2022-09-20T00:54:09.445010
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.sovworks.edslite
76537394771b477ba32a3855dcb7cf9e8d2eb63eb77c17ba5fd81393fddebfd0
EDS Lite
Version: 237
First seen: 2022-09-19T23:24:36.797816
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.quizlet.quizletandroid
45e493cbf8f7ac5c57585883be07dc039929e46f2d85808112849bd20734d9d9
Quizlet
Version: 2600005
First seen: 2022-09-19T16:12:57.835369
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
org.tether.tether
ed02c05c57620c6d7d8540d6fe2e4311592d4bebac985dbeb7b10d10ac69e397
Syphon
Version: 2130
First seen: 2022-09-19T01:48:55.647430
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

1/64
com.cointr
a12e5ed7d973fd6fd470235b170a27bef51b12fe367e7138259aa9b38626a829
CoinTR
Version: 105
First seen: 2022-09-18T10:51:51.874255
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.spotify.music
51e93ce357de6aaeb5289192d41a386d566be6467dcfaabf1f4f6c500977a21c
Spotify
Version: 90966754
First seen: 2022-09-18T10:18:19.903694
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.baraka
df1f76022fac1d30ad6f1a0240b6fa1935992365cb730484a257205f39b7b290
alBaraka
Version: 2
First seen: 2022-09-18T06:41:25.420252
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.whereismytrain.android
de086b0b791abab6119622f2d30ca0f42c4c80279ea7390600f05f693702a711
Where is my Train
Version: 713
First seen: 2022-09-18T03:56:25.735612
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
it.cicma.bevimi.app
c0a321b930a5cf4bea0861a0a94e8769bd6ce80201914998afb33a5af4374284
BeviMI
Version: 281
First seen: 2022-09-17T10:49:10.383757
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
org.blokada.fem.fdroid
1ff45746e8d24ba2f652b8051a544744b7aa08d4b3811cb5afcd52a52e9f3df3
Blokada 5
Version: 666022308
First seen: 2022-09-16T15:08:23.786613
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.jwscheduler.jws
fee7fc7ca3631be8c47b41546959a95220f298cf5e5b254681ef58fe9a3c9d8c
NW Publisher
Version: 151
First seen: 2022-09-15T20:14:03.969072
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.flixify
49720031074ebf91c84c2eecbeb4ec51940dcc60e6ea8f25ab2918d510036764
FlixTV
Version: 7
First seen: 2022-09-15T12:34:13.188528
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

1/63
com.opera.cryptobrowser
6c6b84276c2c6581ad71f2529b7ba686434387335b94e7a6654cf48304a26921
Crypto Browser
Version: 10010
First seen: 2022-09-15T11:27:18.363817
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
video.player.videoplayer
1c6bff15258bbd61cd53de93f18f38036df71608a0fdd97afbb9fc184a25fb78
XPlayer - Video Player
Version: 231400
First seen: 2022-09-15T10:48:54.616793
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

1/64
com.shielder.pro
25f6bfead9f037cb533483059a8aacdc2f7c884412aa5ad45282426a989be415
AVC: Antivirus & Virus Cleaner
Version: 31
First seen: 2022-09-14T21:58:15.306717
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.xrcbapp
2443daedda3ae284161805802260d703ddc0f51b5cef00d787ef2a64ab7ead49
XRCB
Version: 14
First seen: 2022-09-14T11:56:10.888527
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: High Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.topjohnwu.magisk
8c50f8b8f854c1279e089c2d7d75b9457159a0f3b3f471415c38587d62ddbaee
Magisk
Version: 25100
First seen: 2022-09-14T00:11:01.129532
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

2/65
com.lsdroid.cerberuss
b0b89e87f4d8d0127c930ab87891f8c0cf500d1424735ba47ab139c6ccd0665c
System Framework
Version: 283700
First seen: 2022-09-13T20:17:33.117157
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

14/64
Similar samples:
com.lsdroid.cerb…
free.vpn.hot.roostervpn
54cea60ae994b0b1e265b190d5db4c50f5f6e71cafb5509353ed86fbbbe87f94
Rooster Vpn
Version: 95
First seen: 2022-09-13T12:23:19.261698
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.utopia.pxviewr
9acd08d3356e89e9fd10c866293d8b303ca84c03f52fac459ce8b665015031d6
PxView R
Version: 401
First seen: 2022-09-13T05:29:07.098547
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk
com.lsdroid.cerberus
4504937d81feb23d6f80e158518336bb319734c3af182d91e5864bcf62a0d6c8
Cerberus
Version: 283700
First seen: 2022-09-12T17:41:55.265958
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

25/64
Similar samples:
com.lsdroid.cerb…
Attribute: domains

github.com

Attribute: domains_analysis._name

github.com

Threat level: Moderate Risk