Anatomy of an Android Malware Dropper

Recently at EFF’s Threat Lab, we’ve been focusing a lot on the Android malware ecosystem and providing tools for its analysis. We’ve noticed lot of samples of Android malware in the tor-hydra family have surfaced, masquerading as banking apps to lure unsuspecting customers into installing them. In this post, we will take an example of one such sample and analyze it using open-source tools available to anyone.

At a Glance

The sample we’ll be looking at was first seen on …

android android malware dropper malware malware dropper state-sponsored malware technical analysis