The Path to the Payload - Android Edition

Explore the intricacies of reversing a complex Android malware SDK in this 35-minute conference talk from Recon 2019. Delve into each step of the process, uncovering the multiple layers of obfuscation, anti-analysis checks, and encrypted configuration. Discover how the malicious SDK cleverly delivers fake, yet realistic-looking commands to conceal its true payloads when it detects analysis attempts. Follow the speaker's journey through sophisticated hiding techniques employed by Android developers using only Java, and learn how to uncover the well-hidden payloads. Gain insights into previously undisclosed SDK techniques and strategies in this eye-opening presentation on Android malware analysis.