Find malware clues in Android apps without running them.
Produces a static Android APK risk report covering permissions, suspicious API calls, and network indicators.
When to use it
Use to triage a suspicious APK without executing it or to build mobile malware detection rules.
Give it an APK file; it returns a JSON analysis report, with full analysis as the default.
What you provide
Requires Python 3.9 or later.
Requires androguard version 3.4.0 or later for APK and DEX analysis.
Lists apktool as required for resource decompilation.
Lists an isolated analysis environment, such as a VM or sandbox, as a prerequisite.
No additional actions listed.