Learning Path (Beginner + Intermediate)

Android Malware

Reverse engineering APKs and safe dynamic analysis.

Save 79 EUR

Lab tools you will use

jadx-guiapktoolMobSFADBFridaAndroguarddex2jarBytecode ViewerJEB DecompilerdrozerObjectionBurp SuiteAPKiDAPKLeaksGhidraradare2jadx-guiapktoolMobSFADBFridaAndroguarddex2jarBytecode ViewerJEB DecompilerdrozerObjectionBurp SuiteAPKiDAPKLeaksGhidraradare2jadx-guiapktoolMobSFADBFridaAndroguarddex2jarBytecode ViewerJEB DecompilerdrozerObjectionBurp SuiteAPKiDAPKLeaksGhidraradare2jadx-guiapktoolMobSFADBFridaAndroguarddex2jarBytecode ViewerJEB DecompilerdrozerObjectionBurp SuiteAPKiDAPKLeaksGhidraradare2

Included Courses

BEGINNER

Android Malware Beginner

Practical android malware foundations with guided hands-on labs.

1 guided lab10h
INTERMEDIATE

Android Malware Intermediate

Intermediate android malware with complex real-world scenarios and professional workflow.

2 guided labs12h

Why Choose the Full Pack?

Get the Beginner + Intermediate courses bundled together and unlock exclusive extras.

Save 79 EUR
Beginner + Intermediate courses (22h)
All 4 guided labs with isolated VMs
All per-module + certification exams
2 HTK certificates (Beginner + Intermediate)
Extra consolidation lab
Lifetime access + priority support
Access to the HTK community
Join Waitlist →
199 EUR278 EUR

Roadmap

Each phase maps to a course module; scroll to reveal your full progression from beginner fundamentals to intermediate mastery.

1

Phase 1

Beginner

Android Ecosystem Fundamentals & Mobile Threats

Start your android malware journey with Android Malware Beginner.

  • Android architecture: Dalvik/ART, permissions, app sandbox
  • Mobile threat landscape: spyware, bankers, Android RATs
  • Essential tools: ADB, emulator, jadx-gui, apktool
2

Phase 2

Beginner

Static Analysis of APKs

  • APK internal structure: AndroidManifest, smali, resources
  • Decompilation with jadx-gui: reading Java/Kotlin code
  • Detecting suspicious permissions and malicious code smells
3

Phase 3

Beginner

Dynamic Analysis & Instrumentation

  • Installation and execution in isolated emulator with ADB
  • Automated analysis with MobSF: traffic, APIs, behavior
  • Introduction to Frida: hooking critical functions in real time
4

Phase 4

Beginner

Final Report + Certification Exam

  • Documenting mobile IOCs: hashes, C2 domains, abused permissions
  • Writing the complete APK analysis report
5

Phase 5

Intermediate

Advanced Android Threat Analysis

Advance into complex scenarios with Android Malware Intermediate.

  • Multi-stage malware: droppers, loaders, and payload delivery
  • Obfuscation techniques: ProGuard, DexGuard, string encryption
  • Advanced ADB and emulator configuration for evasive samples
6

Phase 6

Intermediate

Deep Static Analysis & Deobfuscation

  • Manual smali patching and repackaging techniques
  • Decrypting hardcoded strings and configuration blobs
  • Analyzing native libraries (JNI/NDK) with Ghidra
7

Phase 7

Intermediate

Advanced Dynamic Instrumentation with Frida

  • Frida scripting: intercepting SSL pinning and crypto functions
  • Runtime C2 protocol analysis and domain generation algorithm (DGA) extraction
  • Anti-emulation bypass techniques
8

Phase 8

Intermediate

Executive Report + Intermediate Certification

  • Mobile threat intelligence report: campaign attribution and IOCs
  • Detection engineering for mobile threat indicators
Android Malware Learning Path: Beginner to Intermediate Cybersecurity Course | HackTheKnowledge | HackTheKnowledge