General
- Target NextGen_mParivahan.apk
- Size 4.2MB
- Sample260825-pmjrtasbqa
- SHA256 d06b9583fddb2b930de2496d049aa5e42de82bb31fe0decb830d82e6dcd29e2d
- MD5 59b41be4c2013e4c0f60530e483c9ac3
- SHA1 f028a41bdfd7c19ba29fc3e0d0d34220609a9ea9
- SHA512 b9b962a7c49297a056dc572550fe7bd73ffba1009366aabd11028f346da49d55c908e99802be6d1ffc396d6bb810d597be4a4b923b41f1d1a6865a0e6fbe10d3
- SSDEEP 98304:o9Otqve4HkyXyTKvDVjkmr3nY+kiPL97DkwIXL3oxl/4:oQwveIkyCTABjXYtijd4L3oT4
- TLSH T1CD163383B91BE920F7F064390081991DE1C9067C30CD76E369DB9E9F8B2F5C99B625E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
NextGen_mParivahan.apk
Resource
android-33-x64-arm64-20260708-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target NextGen_mParivahan.apk
- Size 4.2MB
- SHA256 d06b9583fddb2b930de2496d049aa5e42de82bb31fe0decb830d82e6dcd29e2d
- MD5 59b41be4c2013e4c0f60530e483c9ac3
- SHA1 f028a41bdfd7c19ba29fc3e0d0d34220609a9ea9
- SHA512 b9b962a7c49297a056dc572550fe7bd73ffba1009366aabd11028f346da49d55c908e99802be6d1ffc396d6bb810d597be4a4b923b41f1d1a6865a0e6fbe10d3
- SSDEEP 98304:o9Otqve4HkyXyTKvDVjkmr3nY+kiPL97DkwIXL3oxl/4:oQwveIkyCTABjXYtijd4L3oT4
- TLSH T1CD163383B91BE920F7F064390081991DE1C9067C30CD76E369DB9E9F8B2F5C99B625E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions