domains / families / security / reverse-engineering-android-malware-with-jadx
reverse-engineering-android-malware-with-jadx
separate
'Reverse engineers malicious Android APK files using the JADX decompiler
When to use
- A suspicious Android APK has been reported as malicious or flagged by mobile threat detection
- Analyzing Android banking trojans, spyware, SMS stealers, or adware samples
- Determining what data an app collects, where it sends it, and what permissions it abuses
- Extracting C2 server addresses, encryption keys, and configuration data from Android malware
- Understanding overlay attack mechanisms used by banking trojans
When not to use
- Analyzing obfuscated native (.so) libraries
- Native ARM binary analysis
Skill page
Source