Maldrolyzer
A simple framework for extracting actionable data from Android malware
A simple framework for extracting actionable data from Android malware
Checked October 2026.
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Installation: You have to install the following packets before you start using this project: Androguard (git clone https://github.com/androguard/androguard; cd androguard; sudo python setup.py install) PyCrypto (easy_install pycrypto) pyelftools (easy_install pyelftools) yara (easy_install yara)
Architecture: The project has couple of directories, which host a place for you static analysis or output processing: plugins - this is were the code responsible for the malware identification and data extraction is. Every class has to inherit from Plugin class from templates. Method recon identifies the malware - put there all of the code you need to make sure you can extract the data.
Method extract does the usual extraction. There is no specific format for the extracted data, but it's good to keep it in Python dictionary, so that the ouput processors could read it in a uniform way. processing - this is were you put classes that inherit from OutputProcessor class. They are invoked after the data extraction and get the extracted info. process method takes
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Maldrolyzer: features, pricing and alternatives.
Maldrolyzer is a product in the Malware Analysis category. It covers YARA.
Maldrolyzer is free. Download and setup instructions are at https://github.com/maldroid/maldrolyzer/.
Alternatives to Maldrolyzer listed on CybersecTools:
Compare all Maldrolyzer alternatives at https://cybersectools.com/alternatives/maldrolyzer
Maldrolyzer is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A Java bytecode assembler and disassembler toolkit that converts classfiles to human-readable format and provides decompilation capabilities for reverse engineering Java applications.
Laika BOSS is a scalable object scanner and intrusion detection system that extracts child objects, applies security flags, and generates metadata from files for security analysis.
MalConfScan is a Volatility plugin for extracting configuration data of known malware and analyzing memory images.
Automatic analysis of malware behavior using machine learning.
A community-driven public malware repository providing access to malware samples, tools, and resources for the cybersecurity community.
Multi-OS malware analysis platform with sandbox, static analysis & URL scanning.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,032 products.
Connect your AI
