Analysis
- max time kernel
22s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
25/08/2026, 15:09
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
xiaoyou-floating-translator-android-compat-v7a.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
xiaoyou-floating-translator-android-compat-v7a.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
xiaoyou-floating-translator-android-compat-v7a.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target xiaoyou-floating-translator-android-compat-v7a.apk
- Size 4.1MB
- Sample260825-sjxfaabl6v
- SHA256 73023a0f775124834990bb72bc75efdd86f314dc3a6691cf395cfd5fbcdb27a9
- MD5 99194f91222132e15092b23b0c9a0bf3
- SHA1 7a02c015b59ebe9c1593614adf2b09bebd29b3ce
- SHA512 c40d363bd1bd9847332bbf585e3e68bbac8c54d96228939c085c5a31a045e2c81485797b4c184dd55ecbf931d133d0ac0806c551c00be88caac4450745f621ae
- SSDEEP 98304:0kIfquaXITLt+Rj67dVVb4Hf+kj60BbSs4zkUTbCdBMvp:0FJaItk6LF42kAs4zkSB
- TLSH T13E161283FBE96E1FCC77C1320B8A223256064E17C652E747A998377D68BB6D40E54BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.xiaoyou.translatorfloat - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.xiaoyou.translatorfloat - Checks the presence of a debugger
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.xiaoyou.translatorfloat - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.xiaoyou.translatorfloat - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.xiaoyou.translatorfloat
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xiaoyou.translatorfloat/files/profileInstalled
- Size 24B
- SHA256 0713128854a83e3d08d6c8bd58166648d894a031b9988db0322e09ad9590caea
- MD5 169c7fbe90e1f6125d778d41b5510d96
- SHA1 1edc339e246318c86d70a524609eab889b96cacc
- SHA512 9d1735a51e9374d1223f1b626bafd09e86cece3a4f916d471e3cfd859c4e89ee5c66809b3e9c9de9b0ec6692bdadcab97d0866e9349bed56a08d12dd44a4ff99
- MD5 SHA1 SHA512
- Path /data/data/com.xiaoyou.translatorfloat/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 863de9d50d8ae4c762c45b618171065d6cfeed91138a84ea156ecd44156f0c78
- MD5 a6e12093e823312e77cbc7cb602c471b
- SHA1 60cdc0efd494c577b1c276eea8ea75a7b3dd2684
- SHA512 df7f447f78c124ac05fbed34fdad6ad8a5432e89b15cbb2fc92f7c28c371c3a3ca66c29f5dc5b9cd01591fc14fab22f29b8521be29277eea546c0d712e788f74
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.xiaoyou.translatorfloat/primary.prof
- Size 2KB
- SHA256 38de6101d2a5106acae6a77e7b3acf43584932597d7f052b6ca8b66400bdcf25
- MD5 e72115a35ea8e6e508d5c5ecfe54d87a
- SHA1 c6e9e8414a05e7ee357161cccc5dd814d39995c1
- SHA512 1ad8935e5c7f5345d22a2bf1505d9361322d97cbba251fb45c5da8661d5a9187871f9e057f32e9853374bdabf05a3f7670bcf48e2e80ed5fda83c4229cbfbfaf
- TLSH T1DB514C5FB78096E002351893079452AFB064C24D8C8EBBA7050E7DA8DFB3E74CD99303
- MD5 SHA1 SHA512 TLSH