Mobile threat intelligence for the masses

Try a real life example of Pithus on TryHackMe: Android Malware Analysis
Search by fuzzy hash

Results

com.android.systemui
b1ccec8230bf0d3b4daa43bdbdab63dc83abbe5f09916f767e9f08a1ece01771
System UI
Version: 31
First seen: 2022-09-24T20:28:03.468024
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.google.android.setupwizard
d19371ea1f972a89a9757aa018ce90baf35e7aaa65af0bc0e10146074705f746
Android Setup
Version: 15967
First seen: 2022-09-24T20:02:57.178504
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
de.nulide.findmydevice
e547071f5f1b0d332b6612be572a85f7ee95206d198681ba1fc9d6fb8afc0f53
FindMyDevice
Version: 19
First seen: 2022-09-24T18:20:10.475978
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
ru.aaaaaacj.installer
250fcd17d9367a817d0ad50e42b40051470adcf791bd4f1c679e84a6f384e281
LP Installer
Version: 1788
First seen: 2022-09-23T19:01:29.236754
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

12/66
io.iftech.android.box
9f7c35acc91e4bee3362920b6d2ba3f47fbc6552ff99b262a5612fa1b4b18b88
小组件盒子
Version: 172
First seen: 2022-09-20T12:48:44.449925
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

4/64
com.whereismytrain.android
de086b0b791abab6119622f2d30ca0f42c4c80279ea7390600f05f693702a711
Where is my Train
Version: 713
First seen: 2022-09-18T03:56:25.735612
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
org.blokada.fem.fdroid
1ff45746e8d24ba2f652b8051a544744b7aa08d4b3811cb5afcd52a52e9f3df3
Blokada 5
Version: 666022308
First seen: 2022-09-16T15:08:23.786613
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.oplus.onet
35ae85f4a4905cafd0a582565955a3baa409b895f786a13a6e09b99e9a6ed6e6
ONet
Version: 1010349
First seen: 2022-09-15T21:27:57.872664
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: High Risk
com.lsdroid.cerberuss
b0b89e87f4d8d0127c930ab87891f8c0cf500d1424735ba47ab139c6ccd0665c
System Framework
Version: 283700
First seen: 2022-09-13T20:17:33.117157
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

14/64
Similar samples:
com.lsdroid.cerb…
com.lsdroid.cerberus
4504937d81feb23d6f80e158518336bb319734c3af182d91e5864bcf62a0d6c8
Cerberus
Version: 283700
First seen: 2022-09-12T17:41:55.265958
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

25/64
Similar samples:
com.lsdroid.cerb…
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.tuya.smart
45481ad020f141345f7eb074e4dbb5d11eccb13e1520a232434c4552c1c386cf
Tuya Smart
Version: 482
First seen: 2022-09-06T19:18:29.196070
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.android.companiondevicemanager
3a545c55e626fb76b340b98485b1a8e54d8435985533bef49db1c683271f3ce9
Companion Device Manager
Version: 32
First seen: 2022-09-05T19:34:29.442419
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Low Risk
com.utec.utec
cf419420e8a9882e49292dc9c309af689505a302f61fd8dc19a47ba5d956782d
U-tec
Version: 83
First seen: 2022-09-05T10:49:33.760777
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.systemservice
b5e54d190992256a9317f924ffdc7a967a822961115f6fcf558a2d2c4d03f1aa
Device Health
Version: 9
First seen: 2022-09-02T04:16:20.492497
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

22/65
org.zwanoo.android.speedtest
fc7a74c56f1216572153b7c0f9cc6f9a21dba615c1a1440f4f0252c9825865f9
Speedtest
Version: 168292
First seen: 2022-09-02T01:12:12.013588
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
com.systemservice
d91db72387809da2ed0b3c48bb8b2729e31d0bc3901f195eb331b2cdf1bdf11e
Device Health
Version: 9
First seen: 2022-09-01T03:46:09.228532
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

23/65
com.systemservice
7f79bc793c27fdf3d73889ad49baee4737c6f77578efe416cf317c90484abadf
Device Health
Version: 9
First seen: 2022-08-31T22:30:09.941931
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat:
30/64
Android.Spyware.Spyoo
app.EasyLogger
289ce92449f253dd853338ffe9172bc66afd757d88f19c28375709bd869644e7
Stay Safe Monitor
Version: 116
First seen: 2022-08-31T02:05:28.202179
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

6/64
org.traccar.client.hidden
92494377b8e0d98530be32d58e35e8c0dd43b28a9774669adb852e84332a4aa9
Device Settings
Version: 78
First seen: 2022-08-30T17:11:42.341255
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: Moderate Risk
Similar samples:
org.traccar.clie…
org.traccar.client
b8a8cd0dc022ad8b36d2c474d12aa1fa07ded7e601ec0aaa38a2aba9c23c73e8
Traccar Client
Version: 78
First seen: 2022-08-30T17:09:31.233342
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

6/63
Similar samples:
org.traccar.clie…
com.teamontherun
7e3a3f1b5edeaaa17701a358b06f8f2b983c06c341b6130dd550525d28e0530b
Team on the Run
Version: 132872
First seen: 2022-08-30T11:00:20.779552
Attribute: permissions

android.permission.ACCESS_BACKGROUND_LOCATION

Threat level: High Risk