# Hybrid-Based Analysis Impact on Ransomware Detection for Android Systems
## 3 The Proposed Hybrid-Based Analysis for Ransomware Detection
### Systematic Review of Dynamic Analysis Tools
#### 3.1.3 Installing and Examining the Collected Tools
\begin{table}
\begin{tabular}{c c c c c c c c c} \hline \hline \multirow{2}{*}{**S/N**} & \multirow{2}{*}{**Tool Name**} & \multirow{2}{*}{\begin{tabular}{c} **Analysis** \\ **Type** \\ \end{tabular} } & \multirow{2}{*}{\begin{tabular}{c} **Extracted** \\ **Features** \\ \end{tabular} } & \multicolumn{2}{c}{**Published**} & \multirow{2}{*}{\begin{tabular}{c} **Research** \\ **in Other** \\ **Research** \\ \end{tabular} } & \multirow{2}{*}{\
\begin{tabular}{c} **Availability** \\ **Article** \\ \end{tabular} } & \multirow{2}{*}{
\begin{tabular}{c} **Released** \\ **Year** \\ \end{tabular} } & \multirow{2}{*}{**Categ**} \\ \hline
1 & SanDroid & Hybrid & \
\begin{tabular}{c} Permissions, \\ API Calls \\ \end{tabular} & Yes & [29] &
\begin{tabular}{c} Yes, but not \\ stable \\ \end{tabular} & 2013 & Online/free \\ \hline
2 & MobSF & Hybrid & \
\begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & Yes & [38] & Yes & 2015 &
\begin{tabular}{c} Installation \\ on PC/free \\ \end{tabular} \\ \hline
3 & \begin{tabular}{c} Cuckoo \\ Droid \\ \end{tabular} & Dynamic & \
\begin{tabular}{c} API calls \\ and network \\ activity \\ \end{tabular} & Yes & - & Yes & 2014 &
\begin{tabular}{c} Installation \\ on PC/free \\ \end{tabular} \\ \hline
4 & \
\begin{tabular}{c} sandbox \\ pikker \\ \end{tabular} & Dynamic &
\begin{tabular}{c} API calls \\ and network \\ activity \\ \end{tabular} & No & - & Yes & - & Online/free \\ \hline
5 & Hybrid & \begin{tabular}{c} Hybrid \\ Analysis \\ \end{tabular} & Hybrid & \begin{tabular}{c} API and \\ IOC \\ \end{tabular} & Yes & - & \
\begin{tabular}{c} No \\ (discontinued) \\ \end{tabular} & 2017 &
\begin{tabular}{c} Public/ \\ online/free \\ \end{tabular} \\ \hline
6 & \begin{tabular}{c} Cobra \\ Droid \\ \end{tabular} & Dynamic & \begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & Yes & - & \
\begin{tabular}{c} No \\ (discontinued) \\ \end{tabular} & 2013 &
\begin{tabular}{c} Installation \\ on PC/free \\ \end{tabular} \\ \hline
7 & \begin{tabular}{c} Joesand- \\ box \\ \end{tabular} & Dynamic & \begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & No & - & \
\begin{tabular}{c} No, needs trial \\ account and for \\ business only \\ \end{tabular} & - &
\begin{tabular}{c} Online/ \\ commercial \\ \end{tabular} \\ \hline
8 & \begin{tabular}{c} Andro 4 \\ Lab \\ \end{tabular} & Hybrid & \
\begin{tabular}{c} Depends \\ on each \\ tool \\ \end{tabular} & No & - & Working & - &
\begin{tabular}{c} Public/ \\ installation \\ on PC/free \\ \end{tabular} \\ \hline
9 & Quixoi & Hybrid & \
\begin{tabular}{c} Permissions \\ and app \\ vulnerability \\ \end{tabular} & No & - & Not tested & - &
\begin{tabular}{c} Installation \\ on device/ \\ commercial \\ \end{tabular} \\ \hline
10 & \begin{tabular}{c} Now \\ Secure \\ \end{tabular} & Hybrid & \
\begin{tabular}{c} App vulnerability \\ \end{tabular} & No & - & Not tested & - &
\begin{tabular}{c} Online/ \\ commercial \\ \end{tabular} \\ \hline
11 & \
\begin{tabular}{c} AVC \\ UnDroid \\ \end{tabular} & Static &
\begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & Yes & [39] & & & Online/free \\ \hline
12 & \
\begin{tabular}{c} Andro \\ Total \\ \end{tabular} & Dynamic &
\begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & Yes & [34] & No & - & Online/free \\ \hline
13 & \begin{tabular}{c} SNDBOX \\ \end{tabular} & Hybrid & \
\begin{tabular}{c} Not \\ mentioned \\ \end{tabular} & - & - &
\begin{tabular}{c} Under \\ maintenance \\ \end{tabular} & - & Online/free \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Summary of dynamic and hybrid analysis tools for malware applications.