The growth of the Android ecosystem in Indonesia has increased the complexity of cybersecurity threats, particularly through the spread of malicious APK files disguised as legitimate applications. Attack methods such as fake digital invitations containing banking malware, as well as the use of obfuscation, polymorphism, and dynamic behavior manipulation techniques, have rendered signature-based…