Andrubis

Analyzing Unknown Android Applications

************

Unfortunately, we are discontinuing Andrubis as a public service for now. However, we are planning to continue the development and maintenance of Andrubis. Please send an email to [email protected] for any questions or check https://anubis.iseclab.org later for news on a relaunch of our public service!

************

Analyze what your apps are doing behind your back!

Andrubis is the mobile user interface to the Andrubis analysis service. Andrubis executes Android apps in a sandbox and provides a detailed report about their behavior, including file access, network access, cryptographic operations, dynamic code loading and information leaks. In addition to dynamic analysis, Andrubis also performs static analysis, yielding information on e.g. the app's requested and used permissions, activities, services and external libraries. Based on the results of dynamic and static analysis Andrubis assesses the risk associated with an app in the form of a malice score between 0 to 10 (benign to malicious). This assessment is based on features learned from over 100,000 known benign and malicious applications and retrained on a regular basis.

All analysis tasks are performed on our servers. To submit an application to our server, we recommend WiFi connectivity. Other than the investigated app, no personal information will be transmitted. Note, that Andrubis only supports apps with a file size smaller than 8MB and an API level of up to 10.

Please keep in mind that Andrubis is a research prototype. Analysis results, risk estimates and behavioral information are automatically generated by our analysis environment and therefore not guaranteed to be accurate. The authors are not liable for damage caused by misclassified applications, either benign or malicious.

For more Information feel free to check out our website or social media:

https://anubis.iseclab.org

https://twitter.com/iseclaborg

[email protected]

What's New in the Latest Version 1.1