APKLeaks

ClassyShark

Android and Java bytecode viewer

Detekt

Static code analysis for Kotlin

Quark-Engine

Quark Engine is a static analysis tool designed to detect and score Android malware by identifying malicious behavior patterns within APK files. It specializes in analyzing obfuscated malware, providing security researchers and analysts with a systematic way to assess threats. The tool generates detailed reports that map observed behaviors to known malware families, helping to classify and understand new variants. ## Key Features - **Obfuscation-Neglect Analysis** — Detects malicious behaviors even in heavily obfuscated Android applications. - **Rule-Based Scoring** — Uses a comprehensive database of rules to identify and score specific malware behaviors. - **Malware Family Mapping** — Correlates detected behaviors with known malware families like DroidKungFu, GoldDream, and SpyNote. - **Summary Reports** — Generates concise, actionable reports highlighting the most critical findings. - **Extensible Rule System** — Allows security teams to create and update custom detection rules. ## Philosophy Quark Engine is built on the principle that malicious intent can be uncovered through behavioral analysis, regardless of code obfuscation techniques. The project emphasizes practical, rule-driven detection that benefits the broader security community.