General
- Target iMobile Lite.apk
- Size 8.3MB
- Sample260807-s9de4ayerh
- SHA256 9afecdefc24582eebed5a9969c375227f5c4bf70b1099cecde8bee78f5b51ac1
- MD5 b120f772175cc8f40975fd9983bd61ca
- SHA1 a79010db4119470225d910fe75df161176de686a
- SHA512 bdefe9d175d2dbaa67666a105bf6a0f7ba59612369949faf4bba8a337d539d23cdaca96977b28d8d491d4f8488e574759d671ddc77eb2b4c637dd51e34260b55
- SSDEEP 196608:nmtsFDd4KQImuER+phPpI5t/zoJVEDiucyLYen:asxd4KQIH7pgf/8J3ucyLY2
- TLSH T1FD9633B3A7760C6DF4A78B388CD43226A9678CE4475263CF38DC717C667238847A9D64
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
iMobile Lite.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target iMobile Lite.apk
- Size 8.3MB
- SHA256 9afecdefc24582eebed5a9969c375227f5c4bf70b1099cecde8bee78f5b51ac1
- MD5 b120f772175cc8f40975fd9983bd61ca
- SHA1 a79010db4119470225d910fe75df161176de686a
- SHA512 bdefe9d175d2dbaa67666a105bf6a0f7ba59612369949faf4bba8a337d539d23cdaca96977b28d8d491d4f8488e574759d671ddc77eb2b4c637dd51e34260b55
- SSDEEP 196608:nmtsFDd4KQImuER+phPpI5t/zoJVEDiucyLYen:asxd4KQIH7pgf/8J3ucyLY2
- TLSH T1FD9633B3A7760C6DF4A78B388CD43226A9678CE4475263CF38DC717C667238847A9D64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions