Analyzing APK files inside an online Android application sandbox
by Berislav Kucan - Monday, 14 October 2013.
Anubis is an online project developed by International Secure Systems Lab, which focuses on analyzing of binaries for different type of systems. The online sandbox was first providing capabilities of analyzing Windows PE executables, but from mid-2012 they started supporting Android apps as well.

The Android module, codenamed Andrubis, provides its users with a simple way to execute Android apps in a fully functioning sandbox which does several tests and generates a detailed report for the uploaded APK file. Every report is divided into the following categories:

1. General information

2.Static Analysis Report
  • Activities
  • Services
  • Broadcast Receivers
  • Required Permissions
  • Used Permissions
  • Features
  • URLs.
3. Dynamic Analysis Report

The reports are provided in both HTML and XML formats. PCAP data captures are provided for download as well.

Part of an actual report on Android/DNightmare Trojan, click for large version:



The service generates a "maliciousness rating" for every application which ranges from 0 (likely benign) to 10 (likely malicious). Do take this with a grain of salt, as I have tested a couple of legit applications which were mistakenly labeled as malicious, with very high scores such as 9.66931 or 9.93733.

Anubis is a free service and it doesn't require registration. You can start the analysis by uploading the APK file here.

Spotlight

Bash Shellshock bug: More attacks, more patches

Posted on 29 September 2014.  |  As vendors scramble to issue patches for the GNU Bash Shellshock bug and companies rush to implement them, attackers around the world are probing systems for the hole it opens.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Tue, Sep 30th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //