Now Supporting Genetic Malware Analysis for Android Applications

Intezer

We are excited to share that we now support Genetic Malware Analysis for Android applications!

Intezer Analyze community and enterprise users can now detect code reuse in Android file formats. Supported formats include APK files such as ARM executables (32 and 64 bit) and Dalvik-based modules.

Increasing Adoption of Android Devices
The increasing adoption of Android devices over the last few years, keeping in mind the sensitive information that is stored there, makes this operating system an attractive platform for cyber attacks. Android threats are rising and there are still many malicious apps on the app stores. We wanted to provide the industry with a more effective way to identify threats in this space.

Lazarus Embedded within an Android Application
We recently detected a malware campaign launched by the cyber group Lazarus, which has alleged ties to the North Korean government, embedded within an Android application. After automatically unpacking the APK file, Intezer Analyze identified three embedded dex files which contain code from previous Lazarus variants. View the genetic analysis:

Lazarus Embedded within an Android Application

Intezer Analyze now proudly supports genetic analysis for Windows and Linux executables, in addition to Android APK files.

To get started genetically analyzing your own files and Android APKs, visit analyze.intezer.com or contact us.

Intezer

Count on Intezer Forensic AI SOC to triage, investigate and respond to every alert at unmatched speed and accuracy.

In this article

Share this article
Recommended Blogs
23MIN READ

How attackers are gaining access to LLM inference

Threat actors are wiring live LLM APIs into malware to generate malicious logic at runtime, and this research maps the five routes they use to access AI models for free.
5MIN READ

A Gartner take on the MDR market in 2026

For CISOs navigating the AI era, the question is no longer whether AI will change the SOC. It is whether the current service model is the right vehicle for that change.
27MIN READ

OrBit (Re)turns: Tracking an open-source Linux rootkit across four years of forks and deployments

Explore how OrBit, a two-stage malware, has changed over the last 4 years and why it matters for defenders.