Mobile threat intelligence for the masses

Try a real life example of Pithus on TryHackMe: Android Malware Analysis
Search by fuzzy hash

Results

com.att.callprotect
2134787cb1d6f9d00f7d91b0844527c733c0b7d3cf35fed02db28fa1f06c7e9e
Call Protect
Version: 327000
First seen: 2022-09-24T14:56:25.003365
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.att.dh
01ad9c7a0a42367fe7c5b376cc15aaeb7369bf1772fbbe74bc25fb572641ba1a
Device Help
Version: 210310501
First seen: 2022-09-24T14:50:53.510526
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: High Risk
ru.aaaaaacj.installer
250fcd17d9367a817d0ad50e42b40051470adcf791bd4f1c679e84a6f384e281
LP Installer
Version: 1788
First seen: 2022-09-23T19:01:29.236754
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

12/66
com.whatsapp
c48dc6e10d7f7d4cea7c8bef56f0d8bbb3083583b942560456e4265760a4d260
WhatsApp
Version: 221977000
First seen: 2022-09-23T18:58:55.336690
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.choiceofgames.omnibus
051fa0f7357efc12ae356fb1911de5dbf3db8585c3bbb655c336bdcfda6c4fa1
Choice of Games
Version: 37
First seen: 2022-09-23T05:02:12.026937
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
org.hostedgames.omnibus
16f276339dbafa41fb5766b25c12a57a1497cb17b7bb1491f69b040db4e37019
Hosted Games
Version: 16
First seen: 2022-09-23T04:58:30.054502
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
ru.ps55.omka
0882dec8df20cd2aefbfe8b16b6d5cd4fa24c3db86a3327822e98d99446fb378
OMKA
Version: 180570
First seen: 2022-09-22T09:53:00.192537
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.parsmobapp
f6b4ff4da78494c215219db5806078f1ca17adad837a244a3ba258a45e9ba87d
همراه بانک پارسیان
Version: 200011
First seen: 2022-09-22T08:55:48.851752
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
academicoapp.uis.edu.co
f06cccf8ad99d20a28fc398dae9714d9f6b8e0871db99c00da312a33673aa0ed
Estudiante UIS
Version: 1
First seen: 2022-09-20T22:19:35.554765
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.plexapp.android
08d25e9cd5bfa11a348decd7c9e576f40eb9230b458bcd6d94c78ecc4597ccbb
Plex
Version: 847812944
First seen: 2022-09-20T16:31:58.293114
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.quizlet.quizletandroid
45e493cbf8f7ac5c57585883be07dc039929e46f2d85808112849bd20734d9d9
Quizlet
Version: 2600005
First seen: 2022-09-19T16:12:57.835369
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
se.vkur.clientapp
d53f7423f9d391b637686ba7e9596858ba4b6fbc46ac3eca02a6e03dcdc20e55
Vkurse Client
Version: 160
First seen: 2022-09-18T20:02:47.292889
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

18/63
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

1/64
com.spotify.music
51e93ce357de6aaeb5289192d41a386d566be6467dcfaabf1f4f6c500977a21c
Spotify
Version: 90966754
First seen: 2022-09-18T10:18:19.903694
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.baraka
df1f76022fac1d30ad6f1a0240b6fa1935992365cb730484a257205f39b7b290
alBaraka
Version: 2
First seen: 2022-09-18T06:41:25.420252
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.whereismytrain.android
de086b0b791abab6119622f2d30ca0f42c4c80279ea7390600f05f693702a711
Where is my Train
Version: 713
First seen: 2022-09-18T03:56:25.735612
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.whatsapp
5689d6fd58741e183be1ec4abd96d4f963414d39f2595842a086ba8f263e08e0
WhatsApp
Version: 2139210154
First seen: 2022-09-17T17:45:22.415218
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

1/63
it.cicma.bevimi.app
c0a321b930a5cf4bea0861a0a94e8769bd6ce80201914998afb33a5af4374284
BeviMI
Version: 281
First seen: 2022-09-17T10:49:10.383757
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.jwscheduler.jws
fee7fc7ca3631be8c47b41546959a95220f298cf5e5b254681ef58fe9a3c9d8c
NW Publisher
Version: 151
First seen: 2022-09-15T20:14:03.969072
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
com.flixify
49720031074ebf91c84c2eecbeb4ec51940dcc60e6ea8f25ab2918d510036764
FlixTV
Version: 7
First seen: 2022-09-15T12:34:13.188528
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

1/63
com.opera.cryptobrowser
6c6b84276c2c6581ad71f2529b7ba686434387335b94e7a6654cf48304a26921
Crypto Browser
Version: 10010
First seen: 2022-09-15T11:27:18.363817
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

Threat level: Moderate Risk
video.player.videoplayer
1c6bff15258bbd61cd53de93f18f38036df71608a0fdd97afbb9fc184a25fb78
XPlayer - Video Player
Version: 231400
First seen: 2022-09-15T10:48:54.616793
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

1/64
com.android.internet.a20220914
34be41a01b632ca4b4b011b80cbaf381f0e81e76f94e5024b8fbeb44969df419
Internet Service
Version: 310
First seen: 2022-09-15T03:56:53.760440
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

4/62
Attribute: permissions

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

6/64