Android Malware Samples
Largest open collection of Android malware samples. Live samples - use them at your peril. Collected from several sources/mailing lists. Contributions are welcome - please create a new directory for every sample type, add a README file and samples in that directory. This repository contains a collection of Android malware samples, which can be used for research, testing, and analysis. The samples are collected from various sources and are made available for the benefit of the security community. Please note that the samples are live and should be used with caution. It is recommended to use a virtual environment or a sandboxed environment to analyze the samples. Contributions are welcome! If you have a new sample to add, please create a new directory for it and add a README file with information about the sample. This repository is maintained by [insert name] and is hosted on [insert hosting platform].
FEATURES
SIMILAR TOOLS
A tool for translating Dalvik bytecode to Java bytecode for analyzing Android applications.
A tool for malware analysts to search through base64-encoded samples and generate yara rules.
Online Java decompiler tool with support for modern Java features.
A detailed analysis of malicious packages and how they work
A freeware suite of tools for PE editing and process viewing, including CFF Explorer and Resource Editor.
A tool that generates Yara rules from training data using logistic regression and random forest classifiers.
An online hash checker utility that retrieves information from various online sources, including Virustotal, HybridAnalysis, and more.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.