General
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- Sample260820-pexcyabq2z
- SHA256 6be570e6e8aa47f540f56d34a443acec951c09308c2cf7379d8e6b02bb696056
- MD5 3e8dbf0cbe2d51281a31cb3ee87dd850
- SHA1 694b23940f4519f782aef629b4af68af58bf2763
- SHA512 dceda5252107ca2e578fbc477ff2228605ee147389a950b6820ddd8f826f0ca6e89ef22cbe06c6d28d53e606dbc10e20f0b74ab4ec254f9b56f0563c037721eb
- SSDEEP 98304:9rqbeMM+WiF5wMUqUbud59t592zt3Rfe4t+WUflA9d:9qO+x5jURSz9X921RpUf6T
- TLSH T1BF1633431626D682F5992D39C879E3FAD9F3D40248C0A7BB3B4FFC558A4A3982D71748
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Nextgen_mParivahan.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- SHA256 6be570e6e8aa47f540f56d34a443acec951c09308c2cf7379d8e6b02bb696056
- MD5 3e8dbf0cbe2d51281a31cb3ee87dd850
- SHA1 694b23940f4519f782aef629b4af68af58bf2763
- SHA512 dceda5252107ca2e578fbc477ff2228605ee147389a950b6820ddd8f826f0ca6e89ef22cbe06c6d28d53e606dbc10e20f0b74ab4ec254f9b56f0563c037721eb
- SSDEEP 98304:9rqbeMM+WiF5wMUqUbud59t592zt3Rfe4t+WUflA9d:9qO+x5jURSz9X921RpUf6T
- TLSH T1BF1633431626D682F5992D39C879E3FAD9F3D40248C0A7BB3B4FFC558A4A3982D71748
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions