Madrolyzer
A simple framework to extract actionable data like C&C servers and phone numbers from Android malware samples.
What is Madrolyzer?
Maldrolyzer is a Python-based framework for extracting actionable data from Android malware samples, such as command-and-control servers, phone numbers, and other indicators of compromise. It uses a modular plugin system to identify malware families and extract relevant information, helping security researchers analyze threats efficiently.
Security researchers, malware analysts, and threat intelligence professionals who need to quickly analyze Android APK samples and extract actionable intelligence for investigations.
It offers a simple, extensible framework with a plugin-based architecture, making it easy to add support for new malware families without complex modifications, and integrates with tools like Androguard for static analysis.
Overview
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Use Cases
Best For
- Extracting C&C server addresses from Android malware samples
- Identifying malware families in APK files for threat intelligence
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
