next meeting details: here

date/time: August 28, 2026 @ 7:00 pm - 10:00 pm

rsvp (optional): meetup

Emma - Android Malware Reverse Engineering Workshop

Fire up JADX-gui and poke around a real malware sample of the AndroRAT android malware family. Learn about how android apps are structured and explore malicious functionality.

WARNING THERE WILL BE LOTS OF JAVA

Prereqs:

  • Optional (recommended) download and setup an analysis linux vm like ubuntu.
    • Sample is primarily Dalvik bytecode / compiled Java and is relatively low risk for static analysis.
  • Install Java
  • Download Jadx https://github.com/skylot/jadx/releases/tag/v1.5.5
  • Acquire malware sample by going to https://vx-underground.org/Samples/Families/Android.AndroRAT and downloading version 7729b69281dd037739b6f2802e5b90636694e59482288438ad43b5dfb8d3ad15.7z


location: denhac
700 Kalamath Street, Denver, CO 80204
about this is the local defcon group for denver, colorado, usa. not in our area? see other defcon groups.
faq

do i need to be a denhac member to attend?
no, you do not need to be a member. if the door is locked, please reach out using the details on the contacts page or call the phone number posted on the common area glass door.

is on-site parking available?
yes. on meetup days, parking is free in the lot next to denhac, as well as the lot directly across Kalamath street (both are owned by our building).

has denhac been closed by the Santa Fe road construction?
no, denhac remains open. you can access the building by turning in from Kalamath street, or by using the alley located to the south of denhac and west of Santa Fe.

do you accept talk proposals?
yes, we are always accepting talk proposals. feel free to reach out via the contacts page.