DROID DOES MALWARE: HOW I FORCED AN ANDROID VULNERABILITY INTO BYPASSING MDM RESTRICTIONS + DIY

No ratings

Presented at Mircon 2014 by

Zubair Ashraf

So you’ve got Android malware, but you don't know how to analyze it, other than submitting it to an automatic analysis portal. This session can help you change this. We will walk through how to analyze Android malware, using freely available static and dynamic tools, discover anti-VM/anti-emulator/anti-RE techniques, bypass them using scripts, recompiling Android source, and running your image in an emulator. We will also demonstrate a simple looking code vulnerability and a neat idea to exploit it to bypass MDM restriction. You will see how we used a simple bug and did various manipulation and arm twisting to use it to trick MDM into believing that we were meeting all the safe practices while we did not even have password on the device.