Currently, the issues on Android application’s security have attracted more and more attentions. This paper presents a static analysis method to detect malicious behavior in Android applications. The method uses static data flow analysis technology, and implements a const analysis algorithm that tracing how the const value is used by the application to detect different kinds of malicious behavior, such as ordering services and consuming payments maliciously. The result of experiments shows that the method is practical, and can detect the malicious behavior in Android applications effectively.