CAPE-parsers

CAPE core and community parsers

PyPI version

Configs structure

CNCs: []
campaign: str
botnet: str
dga_seed: hex str
version: str
mutex: str
user_agent: str
build: str
cryptokey: str
cryptokey_type: str (algorithm). Ex: RC4, RSA public key. salsa20, (x)chacha20
raw: {any other data goes here}
  • All CNC entries should be in URL format. aka <schema>://<hostname>:<port>/<uri>
    • Schema examples: tcp://, ftp://, udp://, http(s), etc.
    • Old CAPE configs still have lack of this structures as most of them are dead families.
    • This CNC simplification make it easier to parse with tools like tldextract or urlparse

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.1.69)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for doomedraven from gravatar.com doomedraven

Credits

Author: Kevin O'Reilly

License

MIT License (MIT)

Requires

Python <4.0, >=3.10

Provides Extra

maco

Tags

cape parsers malware configuration

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cape_parsers-0.1.65.tar.gz (149.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cape_parsers-0.1.65-py3-none-any.whl (206.1 kB view details)

Uploaded Python 3

File details

Details for the file cape_parsers-0.1.65.tar.gz.

File metadata

  • Download URL: cape_parsers-0.1.65.tar.gz
  • Upload date:
  • Size: 149.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.65.tar.gz
Algorithm Hash digest
SHA256 b09874d381e20154efdc7051fb6c6430be46a28fa8163e669cdb0920b3a452c1
MD5 3dacad3a0087a55e27347109885c529a
BLAKE2b-256 69ae17e7d851e654ea1d8029daa5300b14d901267162fcfdeaea0ba1a10eee9d

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.65.tar.gz:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cape_parsers-0.1.65-py3-none-any.whl.

File metadata

  • Download URL: cape_parsers-0.1.65-py3-none-any.whl
  • Upload date:
  • Size: 206.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.65-py3-none-any.whl
Algorithm Hash digest
SHA256 1bae88d53bca08698b2af5145814d658f6b52d89886c8136d8b4b22569a3a3e1
MD5 f6e95e33dc8ec1e27d6b714da4024496
BLAKE2b-256 981870e565270c547791b28a58fd8275ff32b6299e2b835f43daf9ded7dc7b70

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.65-py3-none-any.whl:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.69

2 files

0.1.68

2 files

0.1.67

2 files

0.1.66

2 files

This release

0.1.65 This release

2 files

0.1.64

2 files

0.1.63

2 files

0.1.62

2 files

0.1.61

2 files

0.1.60

2 files

0.1.59

2 files

0.1.58

2 files

0.1.57

2 files

0.1.56

2 files

0.1.55

2 files

0.1.54

2 files

0.1.53

2 files

0.1.52

2 files

0.1.51

2 files

0.1.50

2 files

0.1.49

2 files

0.1.48

2 files

0.1.47

2 files

0.1.46

2 files

0.1.45

2 files

0.1.44

2 files

0.1.42

2 files

0.1.41

2 files

0.1.38

2 files

0.1.37

2 files

0.1.36

2 files

0.1.35

2 files

0.1.34

2 files

0.1.33

2 files

0.1.32

2 files

0.1.31

2 files

0.1.29

2 files

0.1.28

2 files

0.1.27

2 files

0.1.26

2 files

0.1.25

2 files

0.1.24

2 files

0.1.23

2 files

0.1.22

2 files

0.1.20

2 files

0.1.18

2 files

0.1.17

2 files

0.1.15

2 files

0.1.14

2 files

0.1.13

2 files

0.1.12

2 files

0.1.10

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

0.1.6

2 files

0.1.4

2 files

0.1.3

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page