Android Malware Reverse Engineering Workshop
Fire up JADX-gui and poke around a real malware sample of the AndroRAT android malware family. Learn about how android apps are structured and explore malicious functionality.
WARNING THERE WILL BE LOTS OF JAVA
Prereqs:
- Optional (recommended) download and setup an analysis linux vm like ubuntu.
- Sample is primarily Dalvik bytecode / compiled Java and is relatively low risk for static analysis.
- Install Java
- Download Jadx https://github.com/skylot/jadx/releases/tag/v1.5.5
- Acquire malware sample by going to https://vx-underground.org/Samples/Families/Android.AndroRAT and downloading version 7729b69281dd037739b6f2802e5b90636694e59482288438ad43b5dfb8d3ad15.7z