CAPEv2 (Config Extractor for Malware) is a powerful specialized Python platform for dynamic analysis of malware and automatic extraction of its configurations.
- Allows you to automatically unpack malicious code in memory, extract payload and configuration data (such as addresses of C2 control servers, cryptographic keys and settings) using YARA rules and decryption signatures.
GitHub - kevoreilly/CAPEv2: Malware Configuration And Payload Extraction
Malware Configuration And Payload Extraction. Contribute to kevoreilly/CAPEv2 development by creating an account on GitHub.