A good starting place is taking the digest in the Tweet above and searching it in VirusTotal: Figure 1 - VirusTotal Analysis I always like to do a bit of OSINT before I start digging into the code, to try to get an idea of what I’m getting into. Luckily for me, they posted a fresh lead about an hour before I got off work. I started out by checking on Twitter to see if they had recently pointed out any malicious APKs that I could analyze.
For this write-up I’ll be analyzing a sample of suspected malware that is not on the Play Store. Fortunately, there are a couple of malware hunting accounts on Twitter who can feed me a steady flow of suspicious APKs to break down.
There is still a lot to learn, so I’m starting to look for more opportunities to practice. Over the last few months I have been cultivating a new skill that I’m getting to use at work: Android malware reverse engineering and analysis.
10 January 2022 Real-world Android Malware Analysis 1: eblagh.apk
0 kommentar(er)
