Morpheus

Red pills that detect presence of Android emulators can be useful for Android malware to evade dynamic analysis tools like Google Bouncer. To get an upper hand against malware developers, we have systematically discovered more than 10,000 red pills through our comprehensive and systematical analysis on Android emulators and real Android devices.

This application is a proof-of-concept implementation that carries the top 30 red pills.

For the red pills and the source code of this app, please visit our project website at http://honeynet.asu.edu/morpheus/

Research Paper

"Morpheus: Automatically Generating Heuristics to Detect Android Emulators"

Yiming Jing, Ziming Zhao, Gail-Joon Ahn, and Hongxin Hu

To appear at the 30th Annual Computer Security Applications Conference