Pithus

Try a real life example of Pithus on TryHackMe: Android Malware Analysis

Search by fuzzy hash

See an example of report.

Results

Version: 130310040

First seen: 2022-05-24T01:08:08.013785

Attribute: permissions

android.permission.sec.MDM_ENTERPRISE_CONTAINER

Threat level: Moderate Risk

KLMS Agent

Version: 5

First seen: 2021-12-14T00:38:56.611148

Attribute: permissions

android.permission.sec.MDM_ENTERPRISE_CONTAINER

Threat level: Moderate Risk

Version: 400000006

First seen: 2021-11-14T10:13:54.627773

Attribute: permissions

android.permission.sec.MDM_ENTERPRISE_CONTAINER

Threat level: Moderate Risk

Secure Folder

Version: 110706100

First seen: 2021-11-14T03:46:51.770046

Attribute: permissions

android.permission.sec.MDM_ENTERPRISE_CONTAINER

Threat level: Moderate Risk

Workspace

Version: 5001015

First seen: 2021-10-29T00:12:54.593630

Attribute: permissions

android.permission.sec.MDM_ENTERPRISE_CONTAINER

Threat level: Moderate Risk

`md5`	Sample MD5 `md5: 3acab2...`
`sha1`	Sample SHA1 `sha1: 3acab2...`
`sha256`	Sample SHA256 `sha256: 3acab2...`
`uaid`	Sample UAID `uaid: 3acab2...`
`permissions`	Requested Android permission `permissions: *.internet`
`java_classes`	Defined Java class `java_classes: "Lcom/amazon/device"`
`features`	Requested Android feature `features: *camera`
`handle`	Application package name `handle: fr.meteo`
`app_name`	Application name `app_name: Google`
`domains`	Found domain `domains: google`
`cert_md5`	Certificate MD5 fingerprint `cert_md5: 3acab2...`
`cert_sha1`	Certificate SHA1 fingerprint `cert_sha1: 3acab2...`
`cert_sha256`	Certificate SHA256 fingerprint `cert_sha256: 3acab2...`
`cert_issuer`	Certificate issuer `cert_issuer: google`
`vt.malicious`	VT detection `vt.malicious:>1`