CAPE-parsers

CAPE core and community parsers

PyPI version

Configs structure

CNCs: []
campaign: str
botnet: str
dga_seed: hex str
version: str
mutex: str
user_agent: str
build: str
cryptokey: str
cryptokey_type: str (algorithm). Ex: RC4, RSA public key. salsa20, (x)chacha20
raw: {any other data goes here}
  • All CNC entries should be in URL format. aka <schema>://<hostname>:<port>/<uri>
    • Schema examples: tcp://, ftp://, udp://, http(s), etc.
    • Old CAPE configs still have lack of this structures as most of them are dead families.
    • This CNC simplification make it easier to parse with tools like tldextract or urlparse

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.1.69)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for doomedraven from gravatar.com doomedraven

Credits

Author: Kevin O'Reilly

License

MIT License (MIT)

Requires

Python <4.0, >=3.10

Provides Extra

maco

Tags

cape parsers malware configuration

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cape_parsers-0.1.67.tar.gz (160.3 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cape_parsers-0.1.67-py3-none-any.whl (217.8 kB view details)

Uploaded Python 3

File details

Details for the file cape_parsers-0.1.67.tar.gz.

File metadata

  • Download URL: cape_parsers-0.1.67.tar.gz
  • Upload date:
  • Size: 160.3 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.67.tar.gz
Algorithm Hash digest
SHA256 cc132eea0b74fd9bd5063818ba069017c27a9e55b10042c1cead118bbd51f114
MD5 2a7e1ffab3fa94fe92bdabab95c8aeb2
BLAKE2b-256 b7bcba50bdc94a9f94e2352078dab0cb53e87862f595b531d96eda0180a1d8d9

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.67.tar.gz:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cape_parsers-0.1.67-py3-none-any.whl.

File metadata

  • Download URL: cape_parsers-0.1.67-py3-none-any.whl
  • Upload date:
  • Size: 217.8 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.67-py3-none-any.whl
Algorithm Hash digest
SHA256 765916fc4ab4a9cf893081c31387e16afbbd916053a71cb1a80f7117eaab69cf
MD5 64c5caf15132243b1eb8e933b20d7054
BLAKE2b-256 2fe1d563b7f3e8720689f6212653167b1e1983201708e8762d6c2486c81de021

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.67-py3-none-any.whl:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

0.1.69

2 files

0.1.68

2 files

This release

0.1.67 This release

2 files

0.1.66

2 files

0.1.65

2 files

0.1.64

2 files

0.1.63

2 files

0.1.62

2 files

0.1.61

2 files

0.1.60

2 files

0.1.59

2 files

0.1.58

2 files

0.1.57

2 files

0.1.56

2 files

0.1.55

2 files

0.1.54

2 files

0.1.53

2 files

0.1.52

2 files

0.1.51

2 files

0.1.50

2 files

0.1.49

2 files

0.1.48

2 files

0.1.47

2 files

0.1.46

2 files

0.1.45

2 files

0.1.44

2 files

0.1.42

2 files

0.1.41

2 files

0.1.38

2 files

0.1.37

2 files

0.1.36

2 files

0.1.35

2 files

0.1.34

2 files

0.1.33

2 files

0.1.32

2 files

0.1.31

2 files

0.1.29

2 files

0.1.28

2 files

0.1.27

2 files

0.1.26

2 files

0.1.25

2 files

0.1.24

2 files

0.1.23

2 files

0.1.22

2 files

0.1.20

2 files

0.1.18

2 files

0.1.17

2 files

0.1.15

2 files

0.1.14

2 files

0.1.13

2 files

0.1.12

2 files

0.1.10

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

0.1.6

2 files

0.1.4

2 files

0.1.3

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page