CAPE-parsers

CAPE core and community parsers

PyPI version

Configs structure

CNCs: []
campaign: str
botnet: str
dga_seed: hex str
version: str
mutex: str
user_agent: str
build: str
cryptokey: str
cryptokey_type: str (algorithm). Ex: RC4, RSA public key. salsa20, (x)chacha20
raw: {any other data goes here}
  • All CNC entries should be in URL format. aka <schema>://<hostname>:<port>/<uri>
    • Schema examples: tcp://, ftp://, udp://, http(s), etc.
    • Old CAPE configs still have lack of this structures as most of them are dead families.
    • This CNC simplification make it easier to parse with tools like tldextract or urlparse

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Latest release

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for doomedraven from gravatar.com doomedraven

Credits

Author: Kevin O'Reilly

License

MIT License (MIT)

Requires

Python <4.0, >=3.10

Provides Extra

maco

Tags

cape parsers malware configuration

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cape_parsers-0.1.69.tar.gz (160.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

cape_parsers-0.1.69-py3-none-any.whl (218.4 kB view details)

Uploaded Python 3

File details

Details for the file cape_parsers-0.1.69.tar.gz.

File metadata

  • Download URL: cape_parsers-0.1.69.tar.gz
  • Upload date:
  • Size: 160.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.69.tar.gz
Algorithm Hash digest
SHA256 3688e4e78723423f5686cd26a7d818d3eea3fd90b11fcb0848700453153961f8
MD5 2db8d63c46d8a1e718aa2bde75a210c0
BLAKE2b-256 37708cea54799f49775723c81d6b51c125a52862e90c7d6e0baaebe50e77bd2d

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.69.tar.gz:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file cape_parsers-0.1.69-py3-none-any.whl.

File metadata

  • Download URL: cape_parsers-0.1.69-py3-none-any.whl
  • Upload date:
  • Size: 218.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for cape_parsers-0.1.69-py3-none-any.whl
Algorithm Hash digest
SHA256 d768ab746668637f3b2f35dd07ebc6fe03d66232bc091dbeb4e0b21bf0a13c1e
MD5 1218ec33c57dcb84c2bb5ccbcba6dd42
BLAKE2b-256 9de7402fd0f844acd4dbb880f472960d5ef47f7308e6a7f4947cb82e31449b31

See more details on using hashes here.

Provenance

The following attestation bundles were made for cape_parsers-0.1.69-py3-none-any.whl:

Publisher: publish.yml on CAPESandbox/CAPE-parsers

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Release history Release notifications | RSS feed

This release

0.1.69 This release

2 files

0.1.68

2 files

0.1.67

2 files

0.1.66

2 files

0.1.65

2 files

0.1.64

2 files

0.1.63

2 files

0.1.62

2 files

0.1.61

2 files

0.1.60

2 files

0.1.59

2 files

0.1.58

2 files

0.1.57

2 files

0.1.56

2 files

0.1.55

2 files

0.1.54

2 files

0.1.53

2 files

0.1.52

2 files

0.1.51

2 files

0.1.50

2 files

0.1.49

2 files

0.1.48

2 files

0.1.47

2 files

0.1.46

2 files

0.1.45

2 files

0.1.44

2 files

0.1.42

2 files

0.1.41

2 files

0.1.38

2 files

0.1.37

2 files

0.1.36

2 files

0.1.35

2 files

0.1.34

2 files

0.1.33

2 files

0.1.32

2 files

0.1.31

2 files

0.1.29

2 files

0.1.28

2 files

0.1.27

2 files

0.1.26

2 files

0.1.25

2 files

0.1.24

2 files

0.1.23

2 files

0.1.22

2 files

0.1.20

2 files

0.1.18

2 files

0.1.17

2 files

0.1.15

2 files

0.1.14

2 files

0.1.13

2 files

0.1.12

2 files

0.1.10

2 files

0.1.9

2 files

0.1.8

2 files

0.1.7

2 files

0.1.6

2 files

0.1.4

2 files

0.1.3

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page