Can I use this for dynamic analysis or runtime hooking?

While primarily focused on static analysis, the workflow includes optional steps for using Frida to perform dynamic instrumentation and runtime method hooking.

What prerequisites are needed to use this skill effectively?

You need JADX 1.5+, Android SDK tools (aapt2), apktool, and Python 3.8+ with the androguard library installed in your environment.

How does the skill handle code obfuscation?

It utilizes JADX's built-in deobfuscation engine to rename minified classes and methods, helping analysts trace logic more effectively.

Does this skill support the analysis of native (.so) libraries?

The skill can extract and perform basic string analysis on native libraries, but for deep ARM binary analysis, it recommends using dedicated tools like Ghidra or IDA Pro.

Android Malware Reverse Engineering

Name: Android Malware Reverse Engineering
Author: mukul975

bymukul975

•

4,121

•

보안 및 테스팅

Analyzes malicious Android APK files using the JADX decompiler to identify data theft, C2 communication, and privilege escalation patterns.

This skill provides a structured framework for security researchers to perform deep static analysis on suspicious Android applications. By leveraging the JADX decompiler, it transforms DEX bytecode into readable Java/Kotlin source code, enabling the identification of malicious behaviors such as banking trojan overlays, SMS interception, and accessibility service abuse. It automates the extraction of critical metadata, permissions, and Indicators of Compromise (IOCs) like C2 server addresses and encryption keys, streamlining the investigation of mobile threats.

주요 기능

01Comprehensive JADX decompilation with advanced deobfuscation support

024,121 GitHub stars

03Pattern-based searching for C2 infrastructure and exfiltration logic

04Automated extraction and decoding of Base64 strings and hardcoded URLs

05Structured reporting for documenting malware families and attack chains

06Automated APK metadata and dangerous permission extraction

사용 사례

01Investigating banking trojans to identify targeted financial applications and credential theft mechanisms

02Analyzing spyware samples to determine the scope of unauthorized data collection and surveillance

03Extracting network-based Indicators of Compromise (IOCs) for blocklisting and threat intelligence

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills reverse-engineering-android-malware-with-jadx

For use in Claude.ai and ChatGPT

주요 기능

01Comprehensive JADX decompilation with advanced deobfuscation support

024,121 GitHub stars

03Pattern-based searching for C2 infrastructure and exfiltration logic

04Automated extraction and decoding of Base64 strings and hardcoded URLs

05Structured reporting for documenting malware families and attack chains

06Automated APK metadata and dangerous permission extraction

사용 사례

01Investigating banking trojans to identify targeted financial applications and credential theft mechanisms

02Analyzing spyware samples to determine the scope of unauthorized data collection and surveillance

03Extracting network-based Indicators of Compromise (IOCs) for blocklisting and threat intelligence

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills reverse-engineering-android-malware-with-jadx

For use in Claude.ai and ChatGPT