CAPE-parsers

CAPE core and community parsers

PyPI version

Configs structure

CNCs: []
campaign: str
botnet: str
dga_seed: hex str
version: str
mutex: str
user_agent: str
build: str
cryptokey: str
cryptokey_type: str (algorithm). Ex: RC4, RSA public key. salsa20, (x)chacha20
raw: {any other data goes here}
  • All CNC entries should be in URL format. aka <schema>://<hostname>:<port>/<uri>
    • Schema examples: tcp://, ftp://, udp://, http(s), etc.
    • Old CAPE configs still have lack of this structures as most of them are dead families.
    • This CNC simplification make it easier to parse with tools like tldextract or urlparse

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.1.69)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for doomedraven from gravatar.com doomedraven

Credits

Author: Kevin O'Reilly

License

MIT License (MIT)

Requires

Python <4.0, >=3.10

Provides Extra

maco

Tags

cape parsers malware configuration

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cape_parsers-0.1.66.tar.gz (160.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cape_parsers-0.1.66-py3-none-any.whl (217.8 kB view details)

Uploaded Python 3

File details

Details for the file cape_parsers-0.1.66.tar.gz.

File metadata

  • Download URL: cape_parsers-0.1.66.tar.gz
  • Upload date:
  • Size: 160.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.66.tar.gz
Algorithm Hash digest
SHA256 c4529945a7dfb148c34c5a9d353156b47dbceb98a9fb6816c72adb1083de8131
MD5 aadc30082020b52f17b4bc1522d62ecb
BLAKE2b-256 8b412c6690d0a2ce85242a2023ef303115fed94adba705a0cc8f0e61c56e3f0c

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.66.tar.gz:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cape_parsers-0.1.66-py3-none-any.whl.

File metadata

  • Download URL: cape_parsers-0.1.66-py3-none-any.whl
  • Upload date:
  • Size: 217.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.66-py3-none-any.whl
Algorithm Hash digest
SHA256 59ac24369cad9bca66e06137526a77a2563d10bf3e8d98f707a78eea6b7dc783
MD5 37fa72b40a41308912c1654a91177f25
BLAKE2b-256 3b59878dbd67d81d4cd6175b910d91441898dc06095ddac66fa9c6400c058c37

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.66-py3-none-any.whl:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.69

2 files

0.1.68

2 files

0.1.67

2 files

This release

0.1.66 This release

2 files

0.1.65

2 files

0.1.64

2 files

0.1.63

2 files

0.1.62

2 files

0.1.61

2 files

0.1.60

2 files

0.1.59

2 files

0.1.58

2 files

0.1.57

2 files

0.1.56

2 files

0.1.55

2 files

0.1.54

2 files

0.1.53

2 files

0.1.52

2 files

0.1.51

2 files

0.1.50

2 files

0.1.49

2 files

0.1.48

2 files

0.1.47

2 files

0.1.46

2 files

0.1.45

2 files

0.1.44

2 files

0.1.42

2 files

0.1.41

2 files

0.1.38

2 files

0.1.37

2 files

0.1.36

2 files

0.1.35

2 files

0.1.34

2 files

0.1.33

2 files

0.1.32

2 files

0.1.31

2 files

0.1.29

2 files

0.1.28

2 files

0.1.27

2 files

0.1.26

2 files

0.1.25

2 files

0.1.24

2 files

0.1.23

2 files

0.1.22

2 files

0.1.20

2 files

0.1.18

2 files

0.1.17

2 files

0.1.15

2 files

0.1.14

2 files

0.1.13

2 files

0.1.12

2 files

0.1.10

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

0.1.6

2 files

0.1.4

2 files

0.1.3

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page