domains / families / security / analyzing-android-malware-with-apktool

analyzing-android-malware-with-apktool

separate

Perform static analysis of Android APK malware using apktool for resource decompilation, jadx for Java source recovery, and androguard for manifest inspection, dangerous permission-combination detection, and identification of obfuscated code, dynamic code loading, and reflection-based API calls. Use to statically triage a suspicious APK without executing it or to build mobile malware detection rules.

When to use

• When investigating security incidents that require analyzing android malware with apktool
• When building detection rules or threat hunting queries for this domain
• When SOC analysts need structured procedures for this analysis type
• When validating security monitoring coverage for related attack techniques

When not to use

• executing the sample

Skill page

Source