General
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- Sample260820-pellfawfnb
- SHA256 f64e4261fcf4e632af5be9df0e3d9c4ed014826e760840d58a67ec67558b5f2c
- MD5 8a91e33f62d3d932e3904182fc9296d9
- SHA1 f8a11e3c88779cea10f364658e60bfaf1a3cd4eb
- SHA512 57ff60e5a5062542683ccf3810ee5b05c879975aa2ebf3125a6317b07095298e8094d0c58f89abb1b7feccd0f3661c61bb96cf52b94424adbfc42c0286d14242
- SSDEEP 98304:HwObS9aWZ4H4zHgY05J5mGhf7IBjNNVfs38bwGI24B9ur:QXxZY4zI9mMQny38bwGhKC
- TLSH T1FB1633FC1C6E482AF18D9BBD45CAE3C68B289547DAC70C1BB91D16F927C97528CBC844
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Nextgen_mParivahan.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- SHA256 f64e4261fcf4e632af5be9df0e3d9c4ed014826e760840d58a67ec67558b5f2c
- MD5 8a91e33f62d3d932e3904182fc9296d9
- SHA1 f8a11e3c88779cea10f364658e60bfaf1a3cd4eb
- SHA512 57ff60e5a5062542683ccf3810ee5b05c879975aa2ebf3125a6317b07095298e8094d0c58f89abb1b7feccd0f3661c61bb96cf52b94424adbfc42c0286d14242
- SSDEEP 98304:HwObS9aWZ4H4zHgY05J5mGhf7IBjNNVfs38bwGI24B9ur:QXxZY4zI9mMQny38bwGhKC
- TLSH T1FB1633FC1C6E482AF18D9BBD45CAE3C68B289547DAC70C1BB91D16F927C97528CBC844
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions