Pithus

Try a real life example of Pithus on TryHackMe: Android Malware Analysis

Search by fuzzy hash

See an example of report.

Results

Samsung Cloud

Version: 440013000

First seen: 2022-05-24T02:10:39.616825

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

Version: 201000000

First seen: 2022-05-24T00:08:43.205035

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

Version: 410013000

First seen: 2022-04-24T20:57:00.908235

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

Version: 1070104000

First seen: 2021-11-14T10:39:52.888321

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

Samsung Push Service

Version: 331300100

First seen: 2021-10-27T02:12:13.155838

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

Version: 390500110

First seen: 2021-09-29T06:06:55.813093

Attribute: permissions

com.sec.spp.permission.SEND

Threat level: Moderate Risk

`md5`	Sample MD5 `md5: 3acab2...`
`sha1`	Sample SHA1 `sha1: 3acab2...`
`sha256`	Sample SHA256 `sha256: 3acab2...`
`uaid`	Sample UAID `uaid: 3acab2...`
`permissions`	Requested Android permission `permissions: *.internet`
`java_classes`	Defined Java class `java_classes: "Lcom/amazon/device"`
`features`	Requested Android feature `features: *camera`
`handle`	Application package name `handle: fr.meteo`
`app_name`	Application name `app_name: Google`
`domains`	Found domain `domains: google`
`cert_md5`	Certificate MD5 fingerprint `cert_md5: 3acab2...`
`cert_sha1`	Certificate SHA1 fingerprint `cert_sha1: 3acab2...`
`cert_sha256`	Certificate SHA256 fingerprint `cert_sha256: 3acab2...`
`cert_issuer`	Certificate issuer `cert_issuer: google`
`vt.malicious`	VT detection `vt.malicious:>1`