CuckooDroid - Automated Android Malware Analysis

[Nytro]

CuckooDroid - Automated Android Malware Analysis.

Contributed By Check Point Software Technologies LTD.

CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of android application.

Installation - Easy integration script:

git config --global user.email "you@example.com"

git config --global user.name "Your Name"

git clone --depth=1 https://github.com/cuckoobox/cuckoo.git cuckoo

cd cuckoo

git remote add droid https://github.com/idanr1986/cuckoo-droid

git pull --no-edit -s recursive -X theirs droid master

cat conf-extra/processing.conf >> conf/processing.conf

cat conf-extra/reporting.conf >> conf/reporting.conf

rm -r conf-extra

echo "protobuf" >> requirements.txt

Documentation

• CuckooDroid - CuckooDroid Book — CuckooDroid v1.0 Book
  
• Cuckoo Sandbox - Cuckoo Sandbox Book — Cuckoo Sandbox v1.2 Book
  

You are advised to read the Cuckoo Sandbox documentation before using CuckooDroid!

Powered by:

• Androguard -> https://code.google.com/p/androguard/
  
• Google Play Unofficial Python API -> https://github.com/egirault/googleplay-api
  

C

redit

• botherder for linux_analyzer_dev -> https://github.com/cuckoobox/cuckoo/tree/linux_analyzer_dev
  

Authors

• Idan Revivo - idanr@checkpoint.com (twitter: idanr86)
  
• Ofer Caspi oferc@checkpoint.com (twitter: @shablolForce)
  

Sursa: https://github.com/idanr1986/cuckoo-droid