Mobile threat intelligence for the masses

Try a real life example of Pithus on TryHackMe: Android Malware Analysis
Search by fuzzy hash
See an example of report.

Results

com.modalrakyat.android
611fe2ec630fc25e1e49e3ef72979cc79aab866831dbdf297335e0bb87d4ce81
Modal Rakyat
Version: 16000002
First seen: 2022-06-23T09:58:25.345663
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.transsion.phonemaster
a5346fb5ea4fba5b73a891eae064b2bdecefbc7de4f9a13e3dcf94b0a81a20af
Phone Master
Version: 5441
First seen: 2022-06-22T23:46:47.300022
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.smd.douyin18.app
9c3fa07b0981d47973ae6e17402029bff511095ed2cfc55136ebea8ae439ff25
TikTok18
Version: 120
First seen: 2022-06-22T12:30:53.461309
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: High Risk
com.ticktick.task
0930fa9f32df25283ba3b01bdc8dcd5c114bebb6131104bc18ad548143dbe6b7
TickTick
Version: 6291
First seen: 2022-06-21T16:39:37.143415
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

9/56
com.wukiapp
2bc9d5bb3485111bfc0396a3f36b2e0cea044655d1446d5d4c8953b943cae37c
MyPaynetics
Version: 1247
First seen: 2022-06-19T17:52:19.855752
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.adguard.android
0a8df031aee8c9bc590d2924e33202430fe7f2b13e0def3b5741fe5bd1fc3fd0
AdGuard
Version: 10000536
First seen: 2022-06-17T14:54:50.399053
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
org.dkf.jmule
3ea3925c2f362788e549fb3b4c04c03dd9f5b48e6b54e3c6a6e707cc38f844a8
Mule on Android
Version: 33
First seen: 2022-06-14T13:23:10.096066
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
cz.lastaapps.menza
325ff0d50a28a9b7d244f9bbf0e610566b0034083c7076ae63082093d47ef8b7
Menza
Version: 1020000
First seen: 2022-06-14T11:58:38.352025
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.trackmyphones.upipaymentannouncer
d3bbb6e60f222d6733570600acdc22ee3e1b10c1730efaf02b4c8fe826beb00d
UPI Payment Announcer
Version: 7
First seen: 2022-06-13T16:17:11.474821
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

9/62
com.grindrapp.android
464e4679664b2d1862d657795e18fc0c0ef302de9bc77a67bf7eaec34b904454
Grindr
Version: 99264
First seen: 2022-06-13T04:34:22.289380
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.miui.android.fashiongallery
232b2e0ab56eaa9e0546103e03a9a950f89d074b10d6be4b1a9e8ee51eb7a64d
Wallpaper Carousel
Version: 20220513
First seen: 2022-06-11T11:56:30.866421
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.estrongs.android.pop
1c8bec216248b0f2a41767c67e0dfa73420f70c56105444eb4d1e54797783ee9
ES File Explorer
Version: 10168
First seen: 2022-06-11T10:59:05.996643
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: High Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.doubleTwist.cloudPlayerPro
d1396111d543bd3cff14ac00650f29e7b088e2d7d80afda72b1caf84192390ac
CloudPlayer Platinum
Version: 10177
First seen: 2022-06-09T23:21:48.360457
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.kitabisa.android
cbbf14c2e570fb7cfa4854377be60c71ae8f6c389e52e822a058686c70d3db20
Kitabisa
Version: 22364
First seen: 2022-06-08T22:41:59.415873
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.facebook.appmanager
81ac6bbc4a3e9042bd5ae1a651456cc8b828119baa60f460c7f898b43ba4b03b
Meta App Manager
Version: 367094856
First seen: 2022-06-08T12:58:59.219303
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.sophos.smsec
98c80b9a02ae236de21b984abbdd838fa19088a4a67c861e791b6bcf199135f6
Sophos Intercept X for Mobile
Version: 3495
First seen: 2022-06-07T23:49:15.300896
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.whatsapp
63d2f1039cab45411e78f25797bb317f713f4507e234f24d78ca04b0d158f4ee
WhatsApp
Version: 221182002
First seen: 2022-06-07T21:11:26.401202
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.hdobox
b1e81f9feb85f710b97ae37e17dadce38c939471896b0367ff8c7f68e22e758d
HDO Box
Version: 28
First seen: 2022-06-07T12:46:43.085805
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
quic.ktran.slate
064bb9f0ad0acb773578bfeccc2e7e4ac6865763abd583682126637bc7975513
Quick Translate
Version: 1
First seen: 2022-06-02T12:27:13.208690
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
org.havenapp.main
6c79473bbe3fffcd7327f0ef770a31d19552b967f30f4622e8b7facbad449ab6
Haven
Version: 102
First seen: 2022-06-02T09:34:21.377061
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.wingi.dev
5f99c7bb9864901fd003c77d758150d326f22a768b18e31620c43e1b66ada2fc
Wingi_dev
Version: 1
First seen: 2022-06-02T05:54:54.003289
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Similar samples:
com.wingi.store
com.wingi.store
com.incognito.wallet
a6bd6b6c2f902def6e8726c98a7b23b373aacf14d84014f48ba8e65647ebe377
Incognito Wallet
Version: 101
First seen: 2022-06-01T21:03:51.017966
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.oky
e54a0d9d47c500d805ef23752292125ac46c9645ab21f4d0e8e7336988ad2f04
Oky
Version: 12
First seen: 2022-05-31T19:13:48.427715
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.miniclip.plagueinc
9b6a41781b0a7f97b42ff6cabadae711f29f0c4b763203efdf40d4a87ba0552c
Plague Inc
Version: 19
First seen: 2022-05-29T02:24:57.505784
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.intsig.camscanner
265479ed06b68288594dcf017cfa7c9f99470ec93e44c3ab0dce725ed6962631
CamScanner
Version: 61587
First seen: 2022-05-27T23:13:40.787474
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: High Risk
com.flyersoft.moonreaderp
f3f283baca17feb377d6188a7bc2c5d96b06044bcd3ad429cc37ea30d2da71d7
Moon+ Reader Pro
Version: 609002
First seen: 2022-05-25T15:00:37.538683
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
org.asascorp.mi6.watchfaces
7d1e7cf34085c9747359c52370eebab24660ce8b21f23cf4877152f612caf542
MiBand 6 Faces
Version: 3
First seen: 2022-05-24T04:37:47.801528
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
net.bat.store
f5346d1388aff293bc84b481c3a9823cc3bf76ffc241fcf455754b86028f22b9
AHA Games
Version: 1903
First seen: 2022-05-22T17:20:32.808661
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

1/62
com.talpa.share
949bf802e335ad0db47b1551cde46af2b2ef13da4b38be969c60c9439b94f05b
XShare Mini
Version: 3538
First seen: 2022-05-22T16:54:13.571777
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
ru.aaaaaaci.installer
464ee52ee13be4b6191845a69ed39323848be410e50ed9ed907a3a1ad8d48bfc
LP Installer
Version: 1778
First seen: 2022-05-20T07:50:45.834928
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

12/63
Similar samples:
ru.aaaaaaci.inst…
com.lbe.parallel
0d6bc9e34f96b0302913df7d3af0d17fb2aa7465c2a159c2567f3e660c7ba2b1
Parallel Space
Version: 136
First seen: 2022-05-19T11:01:12.853997
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
pl.solidexplorer2
7dbe27a9be541a7d61cb6ca157cb8988aef3161001219046747f6819d020bcdd
Solid Explorer
Version: 200246
First seen: 2022-05-18T10:42:57.397082
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Similar samples:
pl.solidexplorer2
in.gov.armaan
0440d33e561835d6fe65d56cbd543eb4a9875a8fbcd070e4a82aa9eb2a5ffc0c
ARMAAN
Version: 114
First seen: 2022-05-18T08:48:34.442943
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Similar samples:
com.wingi.dev
com.wingi.store
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

3/58
pl.solidexplorer2
e0aff63b467d0349ca63351a5fdb85a55ebfaa0afd30885e37a20797a5c99f54
Solid Explorer
Version: 200246
First seen: 2022-05-16T17:40:51.916603
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
pl.solidexplorer2
2983dc6a6e62364c371c849e31ddd375a9d3d694a66f6bc964f923852c90ed56
Solid Explorer
Version: 200246
First seen: 2022-05-16T17:31:12.787395
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Similar samples:
pl.solidexplorer2
com.adguard.android
2dca1dfacd3c0665e36510c283c5fc3c0e30440b97d23066954cbc59fc14695d
AdGuard
Version: 10000536
First seen: 2022-05-14T22:39:39.810509
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
com.vicman.newprofilepic
bb192bbaa6953c5814c8044774e337e373ffd718e105a25a9d2a91c0efddbada
New Profile Pic
Version: 19
First seen: 2022-05-12T19:00:42.566493
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
pinsterdownload.advanceddownloader.com
e8ef737bb40c32005b8d428f894c4742d6d19bb12d5838f2e672919c20593d0f
Pinster Advanced Downloader
Version: 22052808
First seen: 2022-05-12T18:09:32.554723
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

1/63
ru.aaaaaaci.installer
7fbe0ee4f209040f7ca2bbcb8df90c0bd6f9e020b45f2af0bf4db691e902c5bb
LP Installer
Version: 1777
First seen: 2022-05-11T21:02:54.019851
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

12/63
Similar samples:
ru.aaaaaaci.inst…
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk
Similar samples:
com.wingi.dev
com.wingi.store
com.transsion.phonemaster
0134630b56953cb1ca79e818f03074204fc48f24b532a1fc7d82ac225e23e4dc
Phone Master
Version: 5615
First seen: 2022-05-10T11:40:35.853419
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: High Risk
Attribute: domains

www.facebook.com

Attribute: domains_analysis._name

www.facebook.com

Threat level: Moderate Risk