General
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- Sample260823-anh5cagh53
- SHA256 1d11c9297d0a48fdb34753081afd87d696419b0e4d90057ef9f97ab4429905b7
- MD5 fd63bc66c1d1da6651cf1dd11dadad8b
- SHA1 6416573cabe2346df66c4047efc8f40ede4877ef
- SHA512 f1f0f26e2297ccf4fa934bd5cee849f22e1e549a9eee7ff38721754da8394c11bbcaddea1b6481000e6871d0a218a2bf525e8d10266f47fe3a4f7ae64e1d41cc
- SSDEEP 98304:rIFYw6Wdc1BJvSvIWKwuicirWK8efCKu59UE:8BWT9aI1wuZCWKgdt
- TLSH T1BC1633F9FF6FA824FCA401F04A91BE15E388804C95D5191379E928E83BF1E49D4F7A58
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Nextgen_mParivahan.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Nextgen_mParivahan.apk
- Size 4.0MB
- SHA256 1d11c9297d0a48fdb34753081afd87d696419b0e4d90057ef9f97ab4429905b7
- MD5 fd63bc66c1d1da6651cf1dd11dadad8b
- SHA1 6416573cabe2346df66c4047efc8f40ede4877ef
- SHA512 f1f0f26e2297ccf4fa934bd5cee849f22e1e549a9eee7ff38721754da8394c11bbcaddea1b6481000e6871d0a218a2bf525e8d10266f47fe3a4f7ae64e1d41cc
- SSDEEP 98304:rIFYw6Wdc1BJvSvIWKwuicirWK8efCKu59UE:8BWT9aI1wuZCWKgdt
- TLSH T1BC1633F9FF6FA824FCA401F04A91BE15E388804C95D5191379E928E83BF1E49D4F7A58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions