Quark-Engine
Forensics & Incident ResponseAn Obfuscation-Neglect Android Malware Scoring System.
Recent releases
View all 13 releases →
v26.5.1
Bug fix
Notable features
- Added Quark rules for Antidot, Arsink, and TrickMo malware families
Full changelog
Rule Enhancement
- Add new Quark rules for the Antidot, Arsink, and TrickMo malware families. (#903, #907, and #909)
Bug Fixes
- Separate
filled-new-arrayparsing from invoke-kind handling to avoid incorrect bytecode classification. (#867 and #886)
v26.4.1
Bug fix
⚠ Upgrade required
- Bumped Flask dependency from 2.2.5 to 3.1.3
Notable features
- Added analysis report for Hydra malware family
- Added analysis report for SharkBot malware family
Full changelog
Document Enhancements
- Add analysis report for Hydra malware family. (#892)
- Add analysis report for SharkBot malware family. (#900)
Bug Fixes
- Fix issues where
type-castingandinvoke-polymorphicinstructions were skipped during analysis. Thanks to @dolamroth. (#872 and #874) - Fix incorrect type hints in helper functions. Thanks to @dolamroth. (#885)
- Fix incomplete tracking of registers holding array objects. (#890)
Dependency Update
- Bump Flask from 2.2.5 to 3.1.3. (#865)
v26.3.1
New feature
Notable features
- Add a safe DEX checksum auto-repair flow for androguard-based parsing
Full changelog
Performance Improvement
- Record register usage instead of full state to reduce memory usage. (#845)
Document Enhancement
- Add an analysis report for the ToxicPanda malware family. (#863)
New Feature
- Add a safe DEX checksum auto-repair flow for androguard-based parsing. (#866)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
pip
