Mobile threat intelligence for the masses

Try a real life example of Pithus on TryHackMe: Android Malware Analysis
Search by fuzzy hash

Results

com.google.android.setupwizard
d19371ea1f972a89a9757aa018ce90baf35e7aaa65af0bc0e10146074705f746
Android Setup
Version: 15967
First seen: 2022-09-24T20:02:57.178504
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
me.blog.korn123.easydiary
7b326e186e017c25b4685e4c22704e9bf735c7df5412301a7bddeb4727b23791
Easy Diary
Version: 280
First seen: 2022-09-24T18:20:29.491304
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.att.callprotect
2134787cb1d6f9d00f7d91b0844527c733c0b7d3cf35fed02db28fa1f06c7e9e
Call Protect
Version: 327000
First seen: 2022-09-24T14:56:25.003365
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.att.dh
01ad9c7a0a42367fe7c5b376cc15aaeb7369bf1772fbbe74bc25fb572641ba1a
Device Help
Version: 210310501
First seen: 2022-09-24T14:50:53.510526
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: High Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Low Risk
com.att.tv
3204c994466fe7616f2af1be81681138ad3c5e4534de7ecfad191b3f0eb098b7
DIRECTV
Version: 1
First seen: 2022-09-24T14:26:29.299494
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
ru.aaaaaacj.installer
250fcd17d9367a817d0ad50e42b40051470adcf791bd4f1c679e84a6f384e281
LP Installer
Version: 1788
First seen: 2022-09-23T19:01:29.236754
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

12/66
com.whatsapp
c48dc6e10d7f7d4cea7c8bef56f0d8bbb3083583b942560456e4265760a4d260
WhatsApp
Version: 221977000
First seen: 2022-09-23T18:58:55.336690
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
org.hostedgames.omnibus
16f276339dbafa41fb5766b25c12a57a1497cb17b7bb1491f69b040db4e37019
Hosted Games
Version: 16
First seen: 2022-09-23T04:58:30.054502
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
ru.ps55.omka
0882dec8df20cd2aefbfe8b16b6d5cd4fa24c3db86a3327822e98d99446fb378
OMKA
Version: 180570
First seen: 2022-09-22T09:53:00.192537
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
de.init.zollapp
12e8d456ea4bfe09e06b965704e0440a14f425c468fddac7b5762090c21ac35d
Zoll und Reise
Version: 183
First seen: 2022-09-22T07:59:29.378870
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.xaviertobin.noted
c2baa007e96d7f8ed27dcea52383ddccc747203d9f2d75959f409ab88e830967
Bundled Notes
Version: 87
First seen: 2022-09-21T02:34:21.691443
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.vsmartcard.acardemulator
aa2e1a272edb79a15a06a747918e39cc0cd9159dd67515b412e52177c1f90729
Smart Card Emulator
Version: 8
First seen: 2022-09-20T20:40:52.950826
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.plexapp.android
08d25e9cd5bfa11a348decd7c9e576f40eb9230b458bcd6d94c78ecc4597ccbb
Plex
Version: 847812944
First seen: 2022-09-20T16:31:58.293114
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
cz.zdenekhorak.mibandtools
8378e2fce443fd278e8ba9cd5e68678324bae0d3d0a03f499bf831670aa9db80
Mi Band Tools
Version: 600
First seen: 2022-09-20T00:54:09.445010
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
io.oversec.one
487da47eb3ccd7a93aeb397e6e435af0be8f6b79cff7a3a60eaf2051762c20f2
Oversec
Version: 1005015
First seen: 2022-09-20T00:10:04.011077
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.sovworks.edslite
76537394771b477ba32a3855dcb7cf9e8d2eb63eb77c17ba5fd81393fddebfd0
EDS Lite
Version: 237
First seen: 2022-09-19T23:24:36.797816
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.quizlet.quizletandroid
45e493cbf8f7ac5c57585883be07dc039929e46f2d85808112849bd20734d9d9
Quizlet
Version: 2600005
First seen: 2022-09-19T16:12:57.835369
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

1/64
com.spotify.music
51e93ce357de6aaeb5289192d41a386d566be6467dcfaabf1f4f6c500977a21c
Spotify
Version: 90966754
First seen: 2022-09-18T10:18:19.903694
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.whereismytrain.android
de086b0b791abab6119622f2d30ca0f42c4c80279ea7390600f05f693702a711
Where is my Train
Version: 713
First seen: 2022-09-18T03:56:25.735612
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.whatsapp
5689d6fd58741e183be1ec4abd96d4f963414d39f2595842a086ba8f263e08e0
WhatsApp
Version: 2139210154
First seen: 2022-09-17T17:45:22.415218
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

1/63
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

1/57
org.blokada.fem.fdroid
1ff45746e8d24ba2f652b8051a544744b7aa08d4b3811cb5afcd52a52e9f3df3
Blokada 5
Version: 666022308
First seen: 2022-09-16T15:08:23.786613
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.opera.cryptobrowser
6c6b84276c2c6581ad71f2529b7ba686434387335b94e7a6654cf48304a26921
Crypto Browser
Version: 10010
First seen: 2022-09-15T11:27:18.363817
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
video.player.videoplayer
1c6bff15258bbd61cd53de93f18f38036df71608a0fdd97afbb9fc184a25fb78
XPlayer - Video Player
Version: 231400
First seen: 2022-09-15T10:48:54.616793
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

1/64
com.ddm.ethwork
e4bb4a4330c520f8ddd587195bc9ef10774c205e6b300a5da1f3b895ef06a536
Ethwork
Version: 436
First seen: 2022-09-15T07:09:38.333203
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.shielder.pro
25f6bfead9f037cb533483059a8aacdc2f7c884412aa5ad45282426a989be415
AVC: Antivirus & Virus Cleaner
Version: 31
First seen: 2022-09-14T21:58:15.306717
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: High Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.lsdroid.cerberus.client
f41fa15a2f0f89c96ff292d0f64caecaa17fd5fadc566e4918e5ab6bcdd6e12b
Client Cerberus
Version: 15
First seen: 2022-09-13T20:17:21.957902
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

10/64
com.Relmtech.RemotePaid
17bd058c128c3557efe5f43085a8dd87502a8376b657d543b56e75b616bd3552
Unified Remote Full
Version: 321002
First seen: 2022-09-13T20:06:58.096005
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
free.vpn.hot.roostervpn
54cea60ae994b0b1e265b190d5db4c50f5f6e71cafb5509353ed86fbbbe87f94
Rooster Vpn
Version: 95
First seen: 2022-09-13T12:23:19.261698
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
online.moneywell.app
f3786172ad576682637366cc5042860cbf7912fdf677d3ecd1f2199e0a3e2d25
Money Well
Version: 455
First seen: 2022-09-12T13:24:09.456607
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.adidas.confirmed.app
6d2ac048058cbbbef5970db91275989676ca60bbac35cd74447efb4f49ba0e13
CONFIRMED
Version: 20003158
First seen: 2022-09-12T10:41:57.520374
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
co.tech.apkgames
02c92f8c7351b6d207a2b2f1d209c41f8a0c623ba7457a0f8425571240ceb3ba
Apkmody
Version: 480
First seen: 2022-09-12T01:20:46.856370
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

5/64
com.sec.android.app.samsungapps
66f1dd360b8b0ae42f39957bbae56fbd1f453e200b2f9ff44c5c7f04cdd98aff
Galaxy Store
Version: 454307110
First seen: 2022-09-11T10:45:52.901524
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.stronglifts.app
d94fafa675bab42f318915af34d81a4f08c122c9394b1644e287fd0f3a2a2ce2
StrongLifts
Version: 100023
First seen: 2022-09-11T10:31:08.701789
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

1/64
io.japp.blackscreen
869280e703f6ed216096334e56d5acbca9d2bb001260c0991407ec037c7fc925
Black Screen
Version: 24
First seen: 2022-09-11T09:46:00.713563
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk
com.mobizone.ampere
675c8b061a7341b7a52e46fc24289e2130c67c2db2b237438470c5a3ec5e87f7
Accu Ampere
Version: 15
First seen: 2022-09-11T09:39:40.656033
Attribute: domains

play.google.com

Attribute: domains_analysis._name

play.google.com

Threat level: Moderate Risk