Quark Engine

Dig Vulnerabilities in the BlackBox
Presented at DEFCON 28 Blue Team Village and BHASIA Arsenal 2021, 2024
#DEFCON #BHASIA #MobileSecurity #AndroidSecurity

[Quark Engine @quarkengine]

🎉 2025 #QuarkEngine Release Anniversary Recap!

✨ We've achieved 197 releases and aim for greater goals in the new year!

🙏 Thanks to @PippenWang @xspiritualx1 @YushianhD @haeter525 @ZhiHTasi @zorro_wang @sasakikung1 @wen

[Quark Engine @quarkengine]

🎉 Published #QuarkEngine v26.6.1!

Here are one major update:

💡Add new Quark rules and analysis reports for the BRATA, TangleBot, and Godfather malware families.

👉 https://t.co/p3xDEf2OmQ

#AndroidSecurity

[Quark Engine @quarkengine]

🎉 Rules updated for the #BRATA malware family and new report release.

We're continuing to move toward practical and powerful Android malware analysis tools — thanks for your continued support!

📎 Report: https://t.co/nisFyhuOgV

[Quark Engine @quarkengine]

🎉 1 new rule added and 275 rules updated for the
#Tanglebot malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/mEsJ0JpieN

[Quark Engine @quarkengine]

🎉 1 new rule added and 274 rules updated for the
#GodFather malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/ix4u9YOLD4

[Quark Engine @quarkengine]

🎉 Published #QuarkEngine v26.5.1!

Here are one major update:

💡Add new Quark rules and analysis reports for the Antidot, Arsink, and TrickMo malware families.

👉 https://t.co/LO6ZmSUENX

#AndroidSecurity

[Quark Engine @quarkengine]

🎉 1 new rule added and 273 rules updated for the
#Anubis malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/p4ntZIb3ng

[Quark Engine @quarkengine]

🎉 1 new rule added and 272 rules updated for the
#Trickmo malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/9UECSUpCSo

[Quark Engine @quarkengine]

🎉 1 new rule added and 271 rules updated for the #Arsink malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/sfkpIFCqbt

[Quark Engine @quarkengine]

🎉 5 new rules added and 265 rules updated for the #Antidot malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/udpTaPzRCN

[Quark Engine @quarkengine]

🎉 2 new rules added and 263 rules updated for the #Sharkbot malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/KgIW1xP1ab

[Quark Engine @quarkengine]

🎉 1 new rule added and 262 rules updated for the
#Hydra malware family. We're moving toward practical, powerful tools — thanks for your continued support!

📎 Report: https://t.co/uWWacOF4WG

[Quark Engine @quarkengine]

🔬 Quark Rule Generate — Major Update

Automated Android malware family analysis + rule weight optimization pipeline.

📦 Search and Download → 🔍 Threat Intelligence → ⚙️ Rule Generate → 🧠 Score Adjustments

👉 https://t.co/qrtcRmqgfx

#MalwareAnalysis

[Quark Engine @quarkengine]

🚀 #QuarkEngine introduces an AI Issue Solver Workflow.

💡 Instead of manually fixing issues, AI agents can now analyze GitHub issues, generate patches, and open PRs automatically.

👉 https://t.co/HPH61pOvvh

#AI #OpenSource #Cybersecurity

[Quark Engine @quarkengine]

🎉 Published #QuarkEngine v26.3.1!

Here are 3 major updates:

💡Add DEX checksum auto-repair for androguard.
💡Add ToxicPanda analysis report.
💡Record register usage to reduce memory.

👉 https://t.co/ZM02D1UGUK

#AndroidSecurity

[Quark Engine @quarkengine]

❗DEX Checksum (Adler-32) errors can break static analysis workflows.

🔧 #QuarkEngine now detects and handles invalid DEX checksum issues — restoring analyzability without altering core logic.

🙏🏼 Thanks to https://t.co/gSranqE3rj !

🔗 Check: https://t.co/d6CpEXX9jJ

[Quark Engine @quarkengine]

🎉 11 new rules added and 251 rules updated for the #ToxicPanda malware family. We're moving toward practical, powerful tools — thanks for your continued support!

🙏🏼 Thanks to @zorro_wang !

📎 Report: https://t.co/3XC9R8oDAJ

[Quark Engine @quarkengine]

🎉 Published #QuarkEngine v26.2.1!

Here are 3 major updates:

💡Add support for handling semi-corrupted Android APKs
💡Bump requests max version to 2.32.3.
💡Reconstruct documentation.

👉 https://t.co/KMLmepkxlB

#AndroidSecurity

[Quark Engine @quarkengine]

❗Semi-Corrupted APK issue observed in the
#ToxicPanda malware family.

🔧To counter this anti-analysis trick, #QuarkEngine has been upgraded to handle Semi-Corrupted Android APKs.

🔔 #ToxicPanda analysis report will follow.

🔗 Check: https://t.co/U2OzazZJZB

#AndroidSecurity

[Quark Engine @quarkengine]

🎉 Document Enhancement Project!

🧩 quark-engine docs now make malware analysis reports the core, alongside installation and integration — cleaner scope and smoother maintenance.

🔗 Check: https://t.co/zHjDNKRZIj

#AndroidSecurity #Malware

[Quark Engine @quarkengine]

🎯 2026 marks a new chapter for QuarkEngine — focusing on deeper Android malware behavior analysis for real-world analysts.

📘 README now highlights the new direction, along with 6 real malware analysis reports.

🔗 Check: https://t.co/0VOldnqxJ1

#AndroidSecurity #Malware