Android Ransomware Detection Toolkit

Ransomware is a type of malware that illegally encrypts the data of victims' devices to attain financial gains. The impact of ransomware is not limited to corporate desktops but also extends to the very lucrative mobile devices market, whose major chunk is backed by Android OS. These ransomware attacks lead to huge financial, reputational, and data losses to the masses of people. The implemented research uses the static and dynamic artifacts generated by the ransomware to designate an android application as a malign or benign sample. The static artifacts used are the permissions and the APIs invoked by the ransomware. These static artifacts are passed through a branched artificial neural network to attain the best metrics. The dynamically generated network traffic was passed through a fine-tuned LGBMClassifier to detect ransomware on the network. Both of these models amalgamate together to defeat the state-of-the-art solutions present in the contemporary world.