Changing Process Name
An Android app running on a device can be identified by various development tools and apps. Potential attacks or reverse engineering efforts can, however, be prevented or at least impeded significantly by changing the process name.
Malwarelytics for Android is able to change the app process name. It can either select a random value from a list of stealthy process names or a custom name can be used.
Configuration
This feature can be configured during the Malwarelytics initialization phase:
val raspConfig = RaspConfig.Builder()
.processName(ProcessNameConfig)
// configuration of other RASP features
.build()
Available values of ProcessNameConfig
:
Value | Description |
---|---|
NoAction |
indicates that the process name will not be changed. |
UseStealthy( customProcessName:String?) |
indicates that a stealthy name will be used for the process name. |
Process name configuration defaults to ProcessNameConfig.UseStealthy(null)
.
List of available parameters for some config values:
Parameter | Description |
---|---|
customProcessName:String? |
sets a custom name that will be used as the app process name. Value null causes the usage of a random name as the process name. Defaults to null . |
More information on general RASP feature configuration and usage can be found in this overview.