Overview

overview

10

Static

static

10

p_1773322694470.apk

android-11-x64

8

Resubmissions

03/07/2026, 18:33

260703-w7m4ases8y10

03/07/2026, 17:17

260703-vtzphac14v10

Sharing

Copy URL Twitter E-mail

General

  • Target
    p_1773322694470.apk
  • Size 6.8MB
  • Sample260703-vtzphac14v
  • SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ratarsinktrojaninfostealerghostbat

Malware Config

Signatures

  • Family: Arsink

    Arsink is an Android RAT first seen in 2026.

    ratarsink
  • Family: GhostBat

    GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.

    trojaninfostealerratghostbat
  • Detects Arsink RAT 1 IoCs
  • GhostBat RAT payload 1 IoCs
  • Attempts to obfuscate APK file format

    Applies obfuscation techniques to the APK format in order to hinder analysis

  • Requests dangerous framework permissions 7 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • p_1773322694470.apk
    .apk 6.8MB

p_1773322694470.apk

  • SHA256 68b9c7ae6b51f211ecd0cfdd656bc3b14840627adc7073faf9504acdb0e52dae
  • MD5 SHA1 SHA512 SSDEEP TLSH
androidarch:arm64arch:x64arch:x86arch:arm

  • Detects Arsink RAT

  • GhostBat RAT payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
21ca0d75f4fbd53f812198bf0f7b998e3b8d9b447c0f74735ab12e61aa5dc9e3
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=SHHSRX,OU=SAVOGY,O=AUDBPM,L=SWHV8A,ST=OJT83U,C=3JXZHJ
lkjdj.nbzb.jbbxbx

Android Permissions

p_1773322694470.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.READ_SMS

android.permission.BROADCAST_SMS

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.CALL_PHONE

android.permission.READ_PHONE_STATE

android.permission.READ_PHONE_NUMBERS

android.permission.READ_BASIC_PHONE_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WAKE_LOCK

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.REQUEST_COMPANION_START_FOREGROUND_SERVICES_FROM_BACKGROUND

android.permission.FOREGROUND_SERVICE

android.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

android.permission.POST_NOTIFICATIONS

android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.DELETE_SMS