DC303: Emma - Android Malware Reverse Engineering Workshop

Fire up JADX-gui and poke around a real malware sample of the AndroRAT android malware family. Learn about how android apps are structured and explore malicious functionality.

WARNING THERE WILL BE LOTS OF JAVA

Prereqs:
- Optional (recommended) download and setup an analysis linux vm like ubuntu.

• Sample is primarily Dalvik bytecode / compiled Java and is relatively low risk for static analysis.
  - Install Java
  - Download Jadx https://github.com/skylot/jadx/releases/tag/v1.5.5
  - Download. malware sample [https://vx-underground.org/Samples/Families/Android.AndroRAT{ delete these braces to complete the URL }7729b69281dd037739b6f2802e5b90636694e59482288438ad43b5dfb8d3ad15.7z](https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-83r1.pdf)