General
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- Sample260817-g1m3dsvbka
- SHA256 db9733b8f39d7379627c1b43ab5ca11686e5350207aa3504fede486db3fc0f1c
- MD5 58ae6de76ad81de7a88495b9473dc1a4
- SHA1 cfb3d5ee96b09df2bf422cc139663c5e921fbc41
- SHA512 f6f48f040f3e1cb54a42293b9a83de02610f805a217faf925dfb7cae81d3f8be3ee920d2f044bf9dd09e315dc106dba238d32e4fbb6fb7be902a2aba10743bc2
- SSDEEP 98304:2nCRZewFjClWFWTRDWQgYPFcBh7Iut605mKIO9C:2CRQwFjCQFW9CQgYP+BSut9hzg
- TLSH T1BE1633F348A7DEB1FD6423B285B3DE127AC5A8484386CF6570AE9F346B3260055F4786
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Nextgen_mParivahan.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- SHA256 db9733b8f39d7379627c1b43ab5ca11686e5350207aa3504fede486db3fc0f1c
- MD5 58ae6de76ad81de7a88495b9473dc1a4
- SHA1 cfb3d5ee96b09df2bf422cc139663c5e921fbc41
- SHA512 f6f48f040f3e1cb54a42293b9a83de02610f805a217faf925dfb7cae81d3f8be3ee920d2f044bf9dd09e315dc106dba238d32e4fbb6fb7be902a2aba10743bc2
- SSDEEP 98304:2nCRZewFjClWFWTRDWQgYPFcBh7Iut605mKIO9C:2CRQwFjCQFW9CQgYP+BSut9hzg
- TLSH T1BE1633F348A7DEB1FD6423B285B3DE127AC5A8484386CF6570AE9F346B3260055F4786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions