Rolling+Sky_5[.]5[.]11_APKPure[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
Rolling+Sky_5.5.11_APKPure.apk
Size 413.7MB
Sample261024-agf2eaws2p
SHA256 c9c9b97f86ee9dbd05dfdd617c48c8e6338c275e1ac6e2aa728a7ef13828b3fb
MD5 76b28a6dc4e45aeb3688f870990f88d7
SHA1 806d3bae476012022dfcd6ef20a2312738835489
SHA512 2809ecf9fbfe0fa89a867a82f93d8e263aed98748a1be9b4c7664f90f5e9de597cb80363ec4277a60fdfeb1064eea6baf999e190ac8d187f6b00156b68e57db1
SSDEEP 12582912:kthKFxWMnxE1I7WUva7vi8NRROCrFp+2snu+vvWI:keFxWGrWPzi83ROCridntv/
TLSH
T124293302B5A4D20DC96B4173C09887D7654A3E1984DDB87FA11B372918736A8BF9EC3F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW

Untrusted Codesign Signers 2 IoCs

Codesigned file was signed by an untrusted entity.

resource
Rolling+Sky_5.5.11_APKPure.apk
unpack001/327831704

File Explorer

Rolling+Sky_5.5.11_APKPure.apk

.apk 413.7MB
327831704

.apk 6.0MB
sharedassets0.assets.split53

12KB

Rolling+Sky_5.5.11_APKPure.apk

SHA256 c9c9b97f86ee9dbd05dfdd617c48c8e6338c275e1ac6e2aa728a7ef13828b3fb
MD5 76b28a6dc4e45aeb3688f870990f88d7
SHA1 806d3bae476012022dfcd6ef20a2312738835489
SHA512 2809ecf9fbfe0fa89a867a82f93d8e263aed98748a1be9b4c7664f90f5e9de597cb80363ec4277a60fdfeb1064eea6baf999e190ac8d187f6b00156b68e57db1
SSDEEP 12582912:kthKFxWMnxE1I7WUva7vi8NRROCrFp+2snu+vvWI:keFxWGrWPzi83ROCridntv/
TLSH
T124293302B5A4D20DC96B4173C09887D7654A3E1984DDB87FA11B372918736A8BF9EC3F
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

File Signature issue

Digest

8e47690d3d4ab25efae137b644856efde2f18bfe404a168e0f27b490e606fef1

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

O=Turbo Chilli

com.turbochilli.rollingsky

com.turbochilli.rollingsky.AppActivity

com.turbochilli.rollingsky.permission.PermissonActivity

android.intent.action.MAIN

com.prime31.EtceteraProxyActivity

com.prime31.WebViewActivity

com.prime31.P31VideoPlayerActivity

com.turbochilli.rollingsky.webview.ui.WebViewActivity

com.ironsource.sdk.controller.ControllerActivity

com.ironsource.sdk.controller.InterstitialActivity

com.ironsource.sdk.controller.OpenUrlActivity

com.turbochilli.rollingsky.ad.interstitial.admob.AdmobTestActivity

com.m3839.fcm.sdk.internal.ui.HykbFcmDialogActivity

com.m3839.fcm.sdk.internal.ui.HykbFcmModeActivity

com.m3839.fcm.sdk.internal.ui.HykbFcmNewModeActivity

com.m3839.fcm.sdk.internal.ui.HykbNightModeActivity

com.m3839.fcm.sdk.internal.ui.HykbFcmEndActivity

com.m3839.fcm.sdk.internal.ui.HykbPasswordActivity

com.m3839.fcm.sdk.internal.ui.HykbContactActivity

com.sigmob.sdk.base.common.TransparentAdActivity

com.sigmob.sdk.base.common.AdActivity

com.bytedance.sdk.openadsdk.stub.activity.Stub_Standard_Activity

com.bytedance.sdk.openadsdk.stub.activity.Stub_Standard_Portrait_Activity

com.bytedance.sdk.openadsdk.stub.activity.Stub_Standard_Activity_T

com.bytedance.sdk.openadsdk.stub.activity.Stub_Standard_Landscape_Activity

com.bytedance.sdk.openadsdk.stub.activity.Stub_Activity

com.bytedance.sdk.openadsdk.stub.activity.Stub_SingleTask_Activity_T

com.bytedance.sdk.openadsdk.stub.activity.Stub_SingleTask_Activity

com.ss.android.downloadlib.addownload.compliance.AppPrivacyPolicyActivity

com.ss.android.downloadlib.addownload.compliance.AppDetailInfoActivity

com.ss.android.downloadlib.activity.TTDelegateActivity

com.ss.android.downloadlib.activity.JumpKllkActivity

com.ss.android.socialbase.appdownloader.view.DownloadTaskDeleteActivity

com.ss.android.socialbase.appdownloader.view.JumpUnknownSourceActivity

com.bytedance.android.openliveplugin.stub.activity.StubActivity$Activity

com.bytedance.android.openliveplugin.stub.activity.StubActivity$AppCompat

com.bytedance.android.openliveplugin.stub.activity.StubActivity$AppCompat_T

com.bytedance.android.openliveplugin.stub.activity.StubActivity$Activity_T_SingleTask1

com.bytedance.android.openliveplugin.stub.activity.StubActivity$AppCompat_T_SingleTop1

com.bytedance.android.openliveplugin.stub.activity.StubActivity$Activity_Behind

com.bytedance.android.openliveplugin.stub.activity.StubActivity$Activity_T

com.bytedance.android.openliveplugin.stub.activity.StubActivity$AppCompat_Portrait

com.bytedance.android.openliveplugin.stub.activity.StubActivity$Activity_Portrait

com.bytedance.android.openliveplugin.stub.activity.Stub_Standard_Activity_DouyinWebAuthorizeActivity

com.bytedance.android.openliveplugin.stub.activity.DouyinAuthorizeActivityProxy

com.bytedance.android.openliveplugin.stub.activity.StubActivity$AppCompat_SingleTask2

com.qq.e.ads.ADActivity

com.qq.e.ads.PortraitADActivity

com.qq.e.ads.LandscapeADActivity

com.qq.e.ads.RewardvideoPortraitADActivity

com.qq.e.ads.RewardvideoLandscapeADActivity

com.qq.e.ads.DialogActivity

com.kwad.sdk.api.proxy.app.AdWebViewActivity

com.kwad.sdk.api.proxy.app.KsFullScreenVideoActivity

com.kwad.sdk.api.proxy.app.KsFullScreenLandScapeVideoActivity

com.kwad.sdk.api.proxy.app.KsRewardVideoActivity

com.kwad.sdk.api.proxy.app.KSRewardLandScapeVideoActivity

com.kwad.sdk.api.proxy.app.FeedDownloadActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$KsTrendsActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$ProfileHomeActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$ProfileVideoDetailActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$TubeProfileActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$ChannelDetailActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$TubeDetailActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$EpisodeDetailActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$RequestInstallPermissionActivity

intent.action.requestInstallPermission

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$GoodsPlayBackActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity2

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity3

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity4

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity5

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity6

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity7

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity8

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity9

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivity10

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivitySingleTop1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivitySingleTop2

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivitySingleInstance1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$FragmentActivitySingleInstance2

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$DeveloperConfigActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivity

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleTop1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleTop2

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleTask1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleTask2

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleInstance1

com.kwad.sdk.api.proxy.app.BaseFragmentActivity$LandscapeFragmentActivitySingleInstance2

com.mbridge.msdk.activity.MBCommonActivity

com.mbridge.msdk.out.LoadingActivity

com.mbridge.msdk.interstitial.view.MBInterstitialActivity

com.mbridge.msdk.reward.player.MBRewardVideoActivity

com.tencent.klevin.ads.view.RewardAdActivity

com.tencent.klevin.ads.view.InteractiveActivity

com.tencent.klevin.ads.view.InterstitialAdActivity

com.tencent.klevin.ads.view.InterstitialWebAdActivity

com.tencent.klevin.ads.nativ.view.NativeAdDetailActivity

com.tencent.klevin.ads.view.LandingPageActivity

com.tencent.klevin.download.apkdownloader.view.CancelDownloadActivity

com.tencent.klevin.download.apkdownloader.view.ComplianceActivity

com.tencent.klevin.download.apkdownloader.view.NetworkTipActivity

com.tencent.klevin.download.apkdownloader.view.InstallTipActivity

com.cleanmaster.base.crash.LogActivity

com.google.android.gms.ads.AdActivity

com.google.ads.mediation.testsuite.activities.NetworkListActivity

com.google.ads.mediation.testsuite.activities.NetworkDetailActivity

com.google.ads.mediation.testsuite.activities.NativeAdActivity

com.google.ads.mediation.testsuite.activities.InitialActivity

com.google.ads.mediation.testsuite.activities.AdUnitListActivity

com.google.ads.mediation.testsuite.activities.CountryListActivity

com.taptap.payment.checkout.page.PaymentActivity

com.taptap.payment.checkout.page.checkout.PaymentWebViewActivity

com.taptap.payment.wechat.WechatPayActivity

com.taptap.payment.wechat.WechatH5PayActivity

com.taptap.payment.alipaycn.AlipayCNNativeActivity

com.taptap.payment.alipaycn.AlipayCNWebActivity

com.taptap.payment.core.payments.GenericActivity

android.intent.action.VIEW

com.taptap.sdk.login.ui.TapTapLoginActivity

com.alipay.sdk.app.H5PayActivity

com.alipay.sdk.app.H5AuthActivity

com.alipay.sdk.app.PayResultActivity

com.alipay.sdk.app.AlipayResultActivity

com.alipay.sdk.app.H5OpenAuthActivity

com.alipay.sdk.app.APayEntranceActivity

327831704

SHA256 7b493b95a25adf25f98aae036a5c517be1a7af8a2615cb09ca65170aa7e5ae9b
MD5 ffac765f059150b5b1b419ffc05457dc
SHA1 6ba29e7486c5251f725516d82a8601429ecfe5aa
SHA512 a7846712e82b5c1297acbc78f309b0874526ca4fb81366a13c00894d84449a951f30f28518681f397f90f10630a3b1ff34498e12e985bacccffebe2778be85cc
SSDEEP 196608:0w9QXGJnytJXc/A6SqtOvfUCjNOwqWZxIhR+IMJ+AHa:b9QXanytJMY6bskCjLIhR+H6
TLSH
T168563333BBCFDA56C51BE135CA6293079888012D6D1DF2EB3F06D56C89F9D966204E8C
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

infected

File Signature issue

Digest

8594a54c60bae410d9d229d3af84649ada38b8b5bb831f00484ae95df77a7ab4

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Chuan Shan Jia,OU=Pangle,O=ByteDance,L=Beijing,ST=Beijing,C=CN

com.byted.pangle.m

Android Permissions

Rolling+Sky_5.5.11_APKPure.apk

Permissions

android.permission.INTERNET

com.android.vending.BILLING

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.VIBRATE

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.GET_TASKS

android.permission.INTERNET

android.permission.REQUEST_INSTALL_PACKAGES

com.asus.msa.SupplementaryDID.ACCESS

freemme.permission.msa

android.permission.QUERY_ALL_PACKAGES

com.turbochilli.rollingsky.openadsdk.permission.TT_PANGOLIN

android.permission.BLUETOOTH

android.permission.SYSTEM_ALERT_WINDOW

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.WAKE_LOCK

android.permission.CHANGE_NETWORK_STATE

android.permission.REORDER_TASKS

com.turbochilli.rollingsky.permission.KW_SDK_BROADCAST

com.google.android.gms.permission.AD_ID