{"id":4184,"date":"2016-08-09T01:13:07","date_gmt":"2016-08-08T17:13:07","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4184"},"modified":"2016-08-09T01:14:09","modified_gmt":"2016-08-08T17:14:09","slug":"cuckoodroid-automated-android-malware-analysis","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2016\/08\/cuckoodroid-automated-android-malware-analysis\/","title":{"rendered":"CuckooDroid &#8211; Automated Android Malware Analysis"},"content":{"rendered":"<p>CuckooDroid is an extension of <a href=\"https:\/\/www.darknet.org.uk\/2016\/06\/cuckoo-sandbox-automated-malware-analysis-system\/\">Cuckoo Sandbox<\/a> the Open Source software for automating analysis of suspicious files, for Android malware analysis. CuckooDroid brings to Cuckoo the capabilities of execution and analysis of android applications.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2016\/08\/CuckooDroid-Automated-Android-Malware-Analysis-640x303.jpg\" alt=\"CuckooDroid - Automated Android Malware Analysis\" width=\"640\" height=\"303\" class=\"aligncenter size-medium wp-image-4230\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2016\/08\/CuckooDroid-Automated-Android-Malware-Analysis-640x303.jpg 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2016\/08\/CuckooDroid-Automated-Android-Malware-Analysis.jpg 1000w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<p>CuckooDroid provides both static and dynamic APK inspection as well as evading certain VM-detection techniques, encryption key extraction, SSL inspection, API call trace, basic behavioural signatures and many other features.<\/p>\n<p>The framework is highly customizable and extensible &#8211; leveraging the power of the large existing Cuckoo community.<\/p>\n<h3>Installation<\/h3>\n<pre>git config --global user.email \"you@example.com\"\r\ngit config --global user.name \"Your Name\"\r\ngit clone --depth=1 https:\/\/github.com\/cuckoobox\/cuckoo.git cuckoo -b 1.2\r\ncd cuckoo\r\ngit remote add droid https:\/\/github.com\/idanr1986\/cuckoo-droid\r\ngit pull --no-edit -s recursive -X theirs droid master \r\ncat conf-extra\/processing.conf >> conf\/processing.conf\r\ncat conf-extra\/reporting.conf >> conf\/reporting.conf\r\nrm -r conf-extra\r\necho \"protobuf\" >> requirements.txt<\/pre>\n<p>You can download CuckooDroid here:<\/p>\n<p><a href=\"https:\/\/github.com\/idanr1986\/cuckoo-droid\/archive\/master.zip\">cuckoo-droid-master.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/idanr1986\/cuckoo-droid\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, for Android malware analysis. CuckooDroid brings to Cuckoo the capabilities of execution and analysis of android applications. CuckooDroid provides both static and dynamic APK inspection as well as evading certain VM-detection techniques, encryption key extraction, SSL inspection, API [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, for Android malware analysis.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[28,7],"tags":[5986,6070,8566,6068],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4184"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4184"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4184\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4184"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4184"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}