Android Malware Sandbox

Executes APK files in an Android Virtual Device or Docker container to monitor runtime activities, providing insights into malware actions during execution, as highlighted in the README's key features.

Uses Frida hooks to circumvent common malware anti-emulation checks, helping analysts avoid detection by sophisticated threats, a core feature mentioned in the README.

Settings such as emulator paths, snapshot usage, and data wiping are easily adjustable via a config.ini file, allowing customization for different analysis scenarios, as described in the installation section.

Supports custom plugins to add new Frida hooks, enabling researchers to monitor specific API calls or adapt to evolving malware techniques, with plugin requirements detailed in the hooking section.

Generates HTML reports and logs results in a SQLite database, facilitating documentation and review of analysis findings, though the README notes reporting needs improvement.