General
- Target Pm_Ujjwal_yojna_2026_1793257256.apk
- Size 6.2MB
- Sample261030-gynadawva1
- SHA256 3e49fcdc1bef93e1548960f05b1cb50ff585cf733a09568b09e09cbcfa719de8
- MD5 d2c81ea16c88c14fcfe45c402b5e01db
- SHA1 f96cd46350389ce972652459696ad0a4a27df228
- SHA512 45a7565883c618158f8dfaf08c525c0416a8528e11ebb3a270bd372cefd83cbda37f8b4c465b9e97ce3fec6ba94ae796ee4343f3fdc0e2a3173d3c4397f49b80
- SSDEEP 98304:TW2FC6i4IF7UMLBH2dkutuvIOweaOxjUlUgN5Vt7m6HwOt7v6Ujwr2DwpG1KJ:TW2c6O4W8uc5OxjLgNjRjZjwr2DwQ1Y
- TLSH T1F16633B6ABA490ADC943C4B7A3BB610034D252BE51C0B398B6D1A73F254375D42C6FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
Pm_Ujjwal_yojna_2026_1793257256.apk
Resource
android-35-x64-arm64-20260325-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Pm_Ujjwal_yojna_2026_1793257256.apk
- Size 6.2MB
- SHA256 3e49fcdc1bef93e1548960f05b1cb50ff585cf733a09568b09e09cbcfa719de8
- MD5 d2c81ea16c88c14fcfe45c402b5e01db
- SHA1 f96cd46350389ce972652459696ad0a4a27df228
- SHA512 45a7565883c618158f8dfaf08c525c0416a8528e11ebb3a270bd372cefd83cbda37f8b4c465b9e97ce3fec6ba94ae796ee4343f3fdc0e2a3173d3c4397f49b80
- SSDEEP 98304:TW2FC6i4IF7UMLBH2dkutuvIOweaOxjUlUgN5Vt7m6HwOt7v6Ujwr2DwpG1KJ:TW2c6O4W8uc5OxjLgNjRjZjwr2DwQ1Y
- TLSH T1F16633B6ABA490ADC943C4B7A3BB610034D252BE51C0B398B6D1A73F254375D42C6FED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: GhostBat
GhostBat RAT is an Android malware that pretends to be regional transport office applications, first seen in October 2025.
-
GhostBat RAT payload
-
Requests dangerous framework permissions