Android based malware is a new threat that affects countries all over the world. One of the most popular forms of Android malware belonging to the ransomware category of infections, uses torjan horses to lock an Android phone, encrypt files on the SD card, and display a screen that attempts to persuade victims to pay a ransom in order to unlock their phones and/or decrypt their files; However, there is no actual easy procedure to retrieve encrypted files.