Pithus

Try a real life example of Pithus on TryHackMe: Android Malware Analysis

Search by fuzzy hash

See an example of report.

Version: 1004

First seen: 2021-11-28T00:52:50.504503

Attribute: domains

ms-applications-test.appspot.com
ms-applications-exp.appspot.com
ms-applications.appspot.com

Attribute: domains_analysis._name

ms-applications-test.appspot.com
ms-applications-exp.appspot.com
ms-applications.appspot.com

Threat level: Moderate Risk

Version: 2169

First seen: 2021-05-16T09:30:39.276518

Attribute: domains

ms-staging.sc-jpl.com

Attribute: domains_analysis._name

ms-staging.sc-jpl.com

Threat level: High Risk

Version: 12701

First seen: 2021-02-22T23:43:36.319579

Attribute: domains

ms-applications.appspot.com

Attribute: domains_analysis._name

ms-applications.appspot.com

Threat level: Moderate Risk

`md5`	Sample MD5 `md5: 3acab2...`
`sha1`	Sample SHA1 `sha1: 3acab2...`
`sha256`	Sample SHA256 `sha256: 3acab2...`
`uaid`	Sample UAID `uaid: 3acab2...`
`permissions`	Requested Android permission `permissions: *.internet`
`java_classes`	Defined Java class `java_classes: "Lcom/amazon/device"`
`features`	Requested Android feature `features: *camera`
`handle`	Application package name `handle: fr.meteo`
`app_name`	Application name `app_name: Google`
`domains`	Found domain `domains: google`
`cert_md5`	Certificate MD5 fingerprint `cert_md5: 3acab2...`
`cert_sha1`	Certificate SHA1 fingerprint `cert_sha1: 3acab2...`
`cert_sha256`	Certificate SHA256 fingerprint `cert_sha256: 3acab2...`
`cert_issuer`	Certificate issuer `cert_issuer: google`
`vt.malicious`	VT detection `vt.malicious:>1`

Results