I am building a project a part of which involves performing static analysis for Android applications.
I know of Androguard and its tools that help in analyzing Android apks. But I am stuck and don't know how to proceed after this. For example, using androaxml tool of Androguard I can convert binary Android xml to readable AndroidManifest.xml.
Similarly Androapkinfo displays information such as permissions, services, activities on a given APK.
But how can I use this information and determine what makes this AndroidManifest.xml or apk malicious?
I am not looking for exact answers but more of helpful advice, a push in the right direction and some things I should be doing is all I ask