UDcide

Android Malware Behavior Editor.
UDcide logo

Android Malware Behavior Deleter

Overview UDcide is a tool that helps detect and remove specific behaviors in Android malware. Instead of deleting the entire binary, we enable the malware to run still while removing unwanted behaviors.

Getting Started

To use UDcide, you can either clone the repository or download the VSCode extension from the marketplace. The VSCode extension provides an easy-to-use interface for disabling malicious behaviors.


Usage

  1. Open the command palette in VSCode by pressing Ctrl + Shift + P.
  2. Search for and select "UDcide: Android Malware Behavior Deleter".
  3. Choose an APK file to analyze.
  4. Select the specific behaviors you want to disable.
  5. Click "Rebuild" to apply the changes.

Showcase

The tool demonstrates its effectiveness by showcasing a malware that hides its icon after being clicked. With UDcide, we can remove this behavior and prevent the malware from hiding.


Requirements

  • dialog >= 1.3-20190808
  • JDK >= 11
  • Apktool >= 2.5.0




> Visit UDcide Website <