CAPEsolo 0.4.5__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (790) hide show
  1. capesolo-0.4.5/CAPEsolo/__init__.py +0 -0
  2. capesolo-0.4.5/CAPEsolo/analysis_conf.default +30 -0
  3. capesolo-0.4.5/CAPEsolo/analyzer.py +1773 -0
  4. capesolo-0.4.5/CAPEsolo/bin/PPLinject.exe +0 -0
  5. capesolo-0.4.5/CAPEsolo/bin/PPLinject64.exe +0 -0
  6. capesolo-0.4.5/CAPEsolo/bin/autoit3.exe +0 -0
  7. capesolo-0.4.5/CAPEsolo/bin/file.exe +0 -0
  8. capesolo-0.4.5/CAPEsolo/bin/loader.exe +0 -0
  9. capesolo-0.4.5/CAPEsolo/bin/loader_x64.exe +0 -0
  10. capesolo-0.4.5/CAPEsolo/bin/psexec.exe +0 -0
  11. capesolo-0.4.5/CAPEsolo/bin/signtool.exe +0 -0
  12. capesolo-0.4.5/CAPEsolo/cape_logo.png +0 -0
  13. capesolo-0.4.5/CAPEsolo/capelib/__init__.py +0 -0
  14. capesolo-0.4.5/CAPEsolo/capelib/behavior.py +1199 -0
  15. capesolo-0.4.5/CAPEsolo/capelib/cape_utils.py +127 -0
  16. capesolo-0.4.5/CAPEsolo/capelib/logtbl.py +370 -0
  17. capesolo-0.4.5/CAPEsolo/capelib/netlog.py +310 -0
  18. capesolo-0.4.5/CAPEsolo/capelib/objects.py +344 -0
  19. capesolo-0.4.5/CAPEsolo/capelib/parse_pe.py +798 -0
  20. capesolo-0.4.5/CAPEsolo/capelib/path_utils.py +82 -0
  21. capesolo-0.4.5/CAPEsolo/capelib/resultserver.py +602 -0
  22. capesolo-0.4.5/CAPEsolo/capelib/signatures.py +1291 -0
  23. capesolo-0.4.5/CAPEsolo/capelib/url_validate.py +189 -0
  24. capesolo-0.4.5/CAPEsolo/capelib/utils.py +489 -0
  25. capesolo-0.4.5/CAPEsolo/capelib/utils_dicts.py +585 -0
  26. capesolo-0.4.5/CAPEsolo/capelib/utils_pretty_print_funcs.py +769 -0
  27. capesolo-0.4.5/CAPEsolo/capelib/yaralib.py +195 -0
  28. capesolo-0.4.5/CAPEsolo/capesolo.ico +0 -0
  29. capesolo-0.4.5/CAPEsolo/capesolo.png +0 -0
  30. capesolo-0.4.5/CAPEsolo/cfg.ini +5 -0
  31. capesolo-0.4.5/CAPEsolo/classes/__init__.py +0 -0
  32. capesolo-0.4.5/CAPEsolo/classes/behavior_panel.py +449 -0
  33. capesolo-0.4.5/CAPEsolo/classes/configs_panel.py +97 -0
  34. capesolo-0.4.5/CAPEsolo/classes/custom_grid.py +46 -0
  35. capesolo-0.4.5/CAPEsolo/classes/debugger_panel.py +60 -0
  36. capesolo-0.4.5/CAPEsolo/classes/hexview_window.py +76 -0
  37. capesolo-0.4.5/CAPEsolo/classes/key_event.py +19 -0
  38. capesolo-0.4.5/CAPEsolo/classes/logger_window.py +74 -0
  39. capesolo-0.4.5/CAPEsolo/classes/main_frame.py +140 -0
  40. capesolo-0.4.5/CAPEsolo/classes/payloads_panel.py +199 -0
  41. capesolo-0.4.5/CAPEsolo/classes/pe_window.py +435 -0
  42. capesolo-0.4.5/CAPEsolo/classes/process_yara.py +27 -0
  43. capesolo-0.4.5/CAPEsolo/classes/search_dialog.py +127 -0
  44. capesolo-0.4.5/CAPEsolo/classes/signatures_panel.py +102 -0
  45. capesolo-0.4.5/CAPEsolo/classes/splash_screen.py +27 -0
  46. capesolo-0.4.5/CAPEsolo/classes/start_panel.py +637 -0
  47. capesolo-0.4.5/CAPEsolo/classes/strings_panel.py +97 -0
  48. capesolo-0.4.5/CAPEsolo/classes/target_info.py +97 -0
  49. capesolo-0.4.5/CAPEsolo/classes/yara_panel.py +83 -0
  50. capesolo-0.4.5/CAPEsolo/cli.py +82 -0
  51. capesolo-0.4.5/CAPEsolo/data/__init__.py +0 -0
  52. capesolo-0.4.5/CAPEsolo/data/msix.ps1 +40 -0
  53. capesolo-0.4.5/CAPEsolo/data/safelist/__init__.py +0 -0
  54. capesolo-0.4.5/CAPEsolo/data/safelist/disposable_domain_list.txt +27081 -0
  55. capesolo-0.4.5/CAPEsolo/data/safelist/domains.py +197 -0
  56. capesolo-0.4.5/CAPEsolo/data/safelist/replacepatterns.py +36 -0
  57. capesolo-0.4.5/CAPEsolo/data/yara/AgentTesla.yar +26 -0
  58. capesolo-0.4.5/CAPEsolo/data/yara/Al-khaser.yar +12 -0
  59. capesolo-0.4.5/CAPEsolo/data/yara/AntiCuckoo.yar +12 -0
  60. capesolo-0.4.5/CAPEsolo/data/yara/Blister.yar +17 -0
  61. capesolo-0.4.5/CAPEsolo/data/yara/BruteRatel.yar +51 -0
  62. capesolo-0.4.5/CAPEsolo/data/yara/BuerLoader.yar +11 -0
  63. capesolo-0.4.5/CAPEsolo/data/yara/BumbleBee.yar +46 -0
  64. capesolo-0.4.5/CAPEsolo/data/yara/CargoBayLoader.yar +13 -0
  65. capesolo-0.4.5/CAPEsolo/data/yara/DarkGate.yar +17 -0
  66. capesolo-0.4.5/CAPEsolo/data/yara/DarkGateLoader.yar +15 -0
  67. capesolo-0.4.5/CAPEsolo/data/yara/DoomedLoader.yar +12 -0
  68. capesolo-0.4.5/CAPEsolo/data/yara/DridexLoader.yar +11 -0
  69. capesolo-0.4.5/CAPEsolo/data/yara/EmotetPacker.yar +13 -0
  70. capesolo-0.4.5/CAPEsolo/data/yara/Formbook.yar +87 -0
  71. capesolo-0.4.5/CAPEsolo/data/yara/GetTickCountAntiVM.yar +20 -0
  72. capesolo-0.4.5/CAPEsolo/data/yara/Guloader.yar +47 -0
  73. capesolo-0.4.5/CAPEsolo/data/yara/HeavensSyscall.yar +13 -0
  74. capesolo-0.4.5/CAPEsolo/data/yara/IcedID.yar +99 -0
  75. capesolo-0.4.5/CAPEsolo/data/yara/Latrodectus.yar +12 -0
  76. capesolo-0.4.5/CAPEsolo/data/yara/Lumma.yar +27 -0
  77. capesolo-0.4.5/CAPEsolo/data/yara/MemExec.yar +13 -0
  78. capesolo-0.4.5/CAPEsolo/data/yara/MirrorBlast.yar +27 -0
  79. capesolo-0.4.5/CAPEsolo/data/yara/ModiLoader.yar +39 -0
  80. capesolo-0.4.5/CAPEsolo/data/yara/MysterySnail.yar +11 -0
  81. capesolo-0.4.5/CAPEsolo/data/yara/NSIS.yar +12 -0
  82. capesolo-0.4.5/CAPEsolo/data/yara/NitrogenLoader.yar +41 -0
  83. capesolo-0.4.5/CAPEsolo/data/yara/Pafish.yar +14 -0
  84. capesolo-0.4.5/CAPEsolo/data/yara/Pikabot.yar +28 -0
  85. capesolo-0.4.5/CAPEsolo/data/yara/PrivateLoader.yar +12 -0
  86. capesolo-0.4.5/CAPEsolo/data/yara/QakBot.yar +59 -0
  87. capesolo-0.4.5/CAPEsolo/data/yara/RdtscpAntiVM.yar +11 -0
  88. capesolo-0.4.5/CAPEsolo/data/yara/Rhadamanthys.yar +13 -0
  89. capesolo-0.4.5/CAPEsolo/data/yara/RisePro.yar +14 -0
  90. capesolo-0.4.5/CAPEsolo/data/yara/SingleStepAntiHook.yar +11 -0
  91. capesolo-0.4.5/CAPEsolo/data/yara/SlowLoader.yar +12 -0
  92. capesolo-0.4.5/CAPEsolo/data/yara/SmokeLoader.yar +11 -0
  93. capesolo-0.4.5/CAPEsolo/data/yara/Stealc.yar +26 -0
  94. capesolo-0.4.5/CAPEsolo/data/yara/Syscall.yar +14 -0
  95. capesolo-0.4.5/CAPEsolo/data/yara/Themida.yar +12 -0
  96. capesolo-0.4.5/CAPEsolo/data/yara/UPX.yar +12 -0
  97. capesolo-0.4.5/CAPEsolo/data/yara/UrsnifV3.yar +16 -0
  98. capesolo-0.4.5/CAPEsolo/data/yara/VBCrypter.yar +11 -0
  99. capesolo-0.4.5/CAPEsolo/data/yara/XWorm.yar +11 -0
  100. capesolo-0.4.5/CAPEsolo/data/yara/Zloader.yar +26 -0
  101. capesolo-0.4.5/CAPEsolo/dll/capemon.dll +0 -0
  102. capesolo-0.4.5/CAPEsolo/dll/capemon_x64.dll +0 -0
  103. capesolo-0.4.5/CAPEsolo/lib/__init__.py +0 -0
  104. capesolo-0.4.5/CAPEsolo/lib/api/__init__.py +0 -0
  105. capesolo-0.4.5/CAPEsolo/lib/api/process.py +870 -0
  106. capesolo-0.4.5/CAPEsolo/lib/api/screenshot.py +92 -0
  107. capesolo-0.4.5/CAPEsolo/lib/api/utils.py +43 -0
  108. capesolo-0.4.5/CAPEsolo/lib/common/__init__.py +0 -0
  109. capesolo-0.4.5/CAPEsolo/lib/common/abstracts.py +320 -0
  110. capesolo-0.4.5/CAPEsolo/lib/common/common.py +52 -0
  111. capesolo-0.4.5/CAPEsolo/lib/common/constants.py +79 -0
  112. capesolo-0.4.5/CAPEsolo/lib/common/defines.py +327 -0
  113. capesolo-0.4.5/CAPEsolo/lib/common/errors.py +388 -0
  114. capesolo-0.4.5/CAPEsolo/lib/common/exceptions.py +11 -0
  115. capesolo-0.4.5/CAPEsolo/lib/common/hashing.py +20 -0
  116. capesolo-0.4.5/CAPEsolo/lib/common/parse_pe.py +106 -0
  117. capesolo-0.4.5/CAPEsolo/lib/common/rand.py +19 -0
  118. capesolo-0.4.5/CAPEsolo/lib/common/registry.py +144 -0
  119. capesolo-0.4.5/CAPEsolo/lib/common/results.py +226 -0
  120. capesolo-0.4.5/CAPEsolo/lib/common/zip_utils.py +319 -0
  121. capesolo-0.4.5/CAPEsolo/lib/core/__init__.py +3 -0
  122. capesolo-0.4.5/CAPEsolo/lib/core/compound.py +41 -0
  123. capesolo-0.4.5/CAPEsolo/lib/core/config.py +54 -0
  124. capesolo-0.4.5/CAPEsolo/lib/core/log.py +137 -0
  125. capesolo-0.4.5/CAPEsolo/lib/core/packages.py +151 -0
  126. capesolo-0.4.5/CAPEsolo/lib/core/pipe.py +257 -0
  127. capesolo-0.4.5/CAPEsolo/lib/core/privileges.py +78 -0
  128. capesolo-0.4.5/CAPEsolo/lib/core/startup.py +62 -0
  129. capesolo-0.4.5/CAPEsolo/modules/__init__.py +3 -0
  130. capesolo-0.4.5/CAPEsolo/modules/auxiliary/__init__.py +3 -0
  131. capesolo-0.4.5/CAPEsolo/modules/auxiliary/amsi.py +1230 -0
  132. capesolo-0.4.5/CAPEsolo/modules/auxiliary/amsi_collector.py +90 -0
  133. capesolo-0.4.5/CAPEsolo/modules/auxiliary/browser.py +42 -0
  134. capesolo-0.4.5/CAPEsolo/modules/auxiliary/digisig.py +163 -0
  135. capesolo-0.4.5/CAPEsolo/modules/auxiliary/disguise.py +265 -0
  136. capesolo-0.4.5/CAPEsolo/modules/auxiliary/evtx.py +234 -0
  137. capesolo-0.4.5/CAPEsolo/modules/auxiliary/filepickup.py +35 -0
  138. capesolo-0.4.5/CAPEsolo/modules/auxiliary/permissions.py +63 -0
  139. capesolo-0.4.5/CAPEsolo/modules/auxiliary/recentfiles.py +81 -0
  140. capesolo-0.4.5/CAPEsolo/modules/auxiliary/tlsdump.py +58 -0
  141. capesolo-0.4.5/CAPEsolo/modules/packages/__init__.py +3 -0
  142. capesolo-0.4.5/CAPEsolo/modules/packages/archive.py +153 -0
  143. capesolo-0.4.5/CAPEsolo/modules/packages/autoit.py +15 -0
  144. capesolo-0.4.5/CAPEsolo/modules/packages/batch.py +36 -0
  145. capesolo-0.4.5/CAPEsolo/modules/packages/chm.py +24 -0
  146. capesolo-0.4.5/CAPEsolo/modules/packages/dll.py +182 -0
  147. capesolo-0.4.5/CAPEsolo/modules/packages/doc.py +44 -0
  148. capesolo-0.4.5/CAPEsolo/modules/packages/exe.py +46 -0
  149. capesolo-0.4.5/CAPEsolo/modules/packages/hta.py +19 -0
  150. capesolo-0.4.5/CAPEsolo/modules/packages/jar.py +26 -0
  151. capesolo-0.4.5/CAPEsolo/modules/packages/js.py +51 -0
  152. capesolo-0.4.5/CAPEsolo/modules/packages/lnk.py +20 -0
  153. capesolo-0.4.5/CAPEsolo/modules/packages/mht.py +26 -0
  154. capesolo-0.4.5/CAPEsolo/modules/packages/msi.py +18 -0
  155. capesolo-0.4.5/CAPEsolo/modules/packages/msix.py +52 -0
  156. capesolo-0.4.5/CAPEsolo/modules/packages/nsis.py +22 -0
  157. capesolo-0.4.5/CAPEsolo/modules/packages/ps1.py +36 -0
  158. capesolo-0.4.5/CAPEsolo/modules/packages/pub.py +41 -0
  159. capesolo-0.4.5/CAPEsolo/modules/packages/python.py +30 -0
  160. capesolo-0.4.5/CAPEsolo/modules/packages/rar.py +150 -0
  161. capesolo-0.4.5/CAPEsolo/modules/packages/regsvr.py +36 -0
  162. capesolo-0.4.5/CAPEsolo/modules/packages/sct.py +17 -0
  163. capesolo-0.4.5/CAPEsolo/modules/packages/service.py +123 -0
  164. capesolo-0.4.5/CAPEsolo/modules/packages/service_dll.py +170 -0
  165. capesolo-0.4.5/CAPEsolo/modules/packages/shellcode.py +34 -0
  166. capesolo-0.4.5/CAPEsolo/modules/packages/shellcode_trace.py +38 -0
  167. capesolo-0.4.5/CAPEsolo/modules/packages/shellcode_x64.py +41 -0
  168. capesolo-0.4.5/CAPEsolo/modules/packages/shellcode_x64_trace.py +38 -0
  169. capesolo-0.4.5/CAPEsolo/modules/packages/xls.py +38 -0
  170. capesolo-0.4.5/CAPEsolo/modules/packages/xps.py +18 -0
  171. capesolo-0.4.5/CAPEsolo/modules/packages/xslt.py +20 -0
  172. capesolo-0.4.5/CAPEsolo/modules/packages/zip.py +119 -0
  173. capesolo-0.4.5/CAPEsolo/signatures/CAPE.py +609 -0
  174. capesolo-0.4.5/CAPEsolo/signatures/__init__.py +0 -0
  175. capesolo-0.4.5/CAPEsolo/signatures/cape_extracted.py +56 -0
  176. capesolo-0.4.5/CAPEsolo/signatures/community/__init__.py +0 -0
  177. capesolo-0.4.5/CAPEsolo/signatures/community/http_request.py +98 -0
  178. capesolo-0.4.5/CAPEsolo/signatures/community/injection_network.py +110 -0
  179. capesolo-0.4.5/CAPEsolo/signatures/community/network_activity.py +126 -0
  180. capesolo-0.4.5/CAPEsolo/signatures/community/network_anomaly.py +71 -0
  181. capesolo-0.4.5/CAPEsolo/signatures/community/network_bind.py +61 -0
  182. capesolo-0.4.5/CAPEsolo/signatures/community/network_cnc_encrypted.py +972 -0
  183. capesolo-0.4.5/CAPEsolo/signatures/community/network_cnc_generic.py +77 -0
  184. capesolo-0.4.5/CAPEsolo/signatures/community/network_cnc_http.py +175 -0
  185. capesolo-0.4.5/CAPEsolo/signatures/community/network_dga.py +64 -0
  186. capesolo-0.4.5/CAPEsolo/signatures/community/network_dns_suspicious.py +586 -0
  187. capesolo-0.4.5/CAPEsolo/signatures/community/network_dyndns.py +99 -0
  188. capesolo-0.4.5/CAPEsolo/signatures/community/network_excessive_udp.py +52 -0
  189. capesolo-0.4.5/CAPEsolo/signatures/community/network_explorer.py +54 -0
  190. capesolo-0.4.5/CAPEsolo/signatures/community/network_fake_useragent.py +69 -0
  191. capesolo-0.4.5/CAPEsolo/signatures/community/network_http.py +64 -0
  192. capesolo-0.4.5/CAPEsolo/signatures/community/network_icmp.py +40 -0
  193. capesolo-0.4.5/CAPEsolo/signatures/community/network_irc.py +33 -0
  194. capesolo-0.4.5/CAPEsolo/signatures/community/network_open_proxy.py +171 -0
  195. capesolo-0.4.5/CAPEsolo/signatures/community/network_p2p.py +67 -0
  196. capesolo-0.4.5/CAPEsolo/signatures/community/network_payload_download.py +112 -0
  197. capesolo-0.4.5/CAPEsolo/signatures/community/network_questionable_host.py +73 -0
  198. capesolo-0.4.5/CAPEsolo/signatures/community/network_questionable_http_path.py +96 -0
  199. capesolo-0.4.5/CAPEsolo/signatures/community/network_smtp.py +49 -0
  200. capesolo-0.4.5/CAPEsolo/signatures/community/network_tor.py +53 -0
  201. capesolo-0.4.5/CAPEsolo/signatures/community/network_tor_service.py +38 -0
  202. capesolo-0.4.5/CAPEsolo/signatures/community/network_torgateway.py +73 -0
  203. capesolo-0.4.5/CAPEsolo/signatures/community/recon_checkip.py +304 -0
  204. capesolo-0.4.5/CAPEsolo/signatures/community/stealth_network.py +41 -0
  205. capesolo-0.4.5/CAPEsolo/signatures/https.py +49 -0
  206. capesolo-0.4.5/CAPEsolo/utils/__init__.py +0 -0
  207. capesolo-0.4.5/CAPEsolo/utils/update_yara.py +79 -0
  208. capesolo-0.4.5/CAPEsolo/version.txt +1 -0
  209. capesolo-0.4.5/CAPEsolo/yara/CAPE/AgentTesla.yar +207 -0
  210. capesolo-0.4.5/CAPEsolo/yara/CAPE/Amadey.yar +14 -0
  211. capesolo-0.4.5/CAPEsolo/yara/CAPE/Arkei.yar +24 -0
  212. capesolo-0.4.5/CAPEsolo/yara/CAPE/AsyncRAT.yar +40 -0
  213. capesolo-0.4.5/CAPEsolo/yara/CAPE/Atlas.yar +13 -0
  214. capesolo-0.4.5/CAPEsolo/yara/CAPE/AuroraStealer.yar +74 -0
  215. capesolo-0.4.5/CAPEsolo/yara/CAPE/Azer.yar +13 -0
  216. capesolo-0.4.5/CAPEsolo/yara/CAPE/Azorult.yar +12 -0
  217. capesolo-0.4.5/CAPEsolo/yara/CAPE/BadRabbit.yar +13 -0
  218. capesolo-0.4.5/CAPEsolo/yara/CAPE/Bazar.yar +11 -0
  219. capesolo-0.4.5/CAPEsolo/yara/CAPE/BitPaymer.yar +13 -0
  220. capesolo-0.4.5/CAPEsolo/yara/CAPE/BlackDropper.yar +17 -0
  221. capesolo-0.4.5/CAPEsolo/yara/CAPE/Blister.yar +17 -0
  222. capesolo-0.4.5/CAPEsolo/yara/CAPE/BruteRatel.yar +14 -0
  223. capesolo-0.4.5/CAPEsolo/yara/CAPE/BuerLoader.yar +12 -0
  224. capesolo-0.4.5/CAPEsolo/yara/CAPE/BumbleBee - Copy.yar +68 -0
  225. capesolo-0.4.5/CAPEsolo/yara/CAPE/BumbleBee.yar +68 -0
  226. capesolo-0.4.5/CAPEsolo/yara/CAPE/Carbanak.yar +14 -0
  227. capesolo-0.4.5/CAPEsolo/yara/CAPE/CargoBayLoader.yar +13 -0
  228. capesolo-0.4.5/CAPEsolo/yara/CAPE/Cerber.yar +12 -0
  229. capesolo-0.4.5/CAPEsolo/yara/CAPE/CobaltStrikeBeacon.yar +30 -0
  230. capesolo-0.4.5/CAPEsolo/yara/CAPE/CobaltStrikeStager.yar +15 -0
  231. capesolo-0.4.5/CAPEsolo/yara/CAPE/Codoso.yar +13 -0
  232. capesolo-0.4.5/CAPEsolo/yara/CAPE/Conti.yar +13 -0
  233. capesolo-0.4.5/CAPEsolo/yara/CAPE/Cryptoshield.yar +13 -0
  234. capesolo-0.4.5/CAPEsolo/yara/CAPE/DCRat.yar +87 -0
  235. capesolo-0.4.5/CAPEsolo/yara/CAPE/DarkGate.yar +16 -0
  236. capesolo-0.4.5/CAPEsolo/yara/CAPE/DoppelPaymer.yar +13 -0
  237. capesolo-0.4.5/CAPEsolo/yara/CAPE/Dreambot.yar +14 -0
  238. capesolo-0.4.5/CAPEsolo/yara/CAPE/DridexLoader.yar +17 -0
  239. capesolo-0.4.5/CAPEsolo/yara/CAPE/DridexV4.yar +15 -0
  240. capesolo-0.4.5/CAPEsolo/yara/CAPE/Emotet.yar +47 -0
  241. capesolo-0.4.5/CAPEsolo/yara/CAPE/EmotetLoader.yar +12 -0
  242. capesolo-0.4.5/CAPEsolo/yara/CAPE/EternalRomance.yar +33 -0
  243. capesolo-0.4.5/CAPEsolo/yara/CAPE/Fareit.yar +11 -0
  244. capesolo-0.4.5/CAPEsolo/yara/CAPE/Formbook.yar +18 -0
  245. capesolo-0.4.5/CAPEsolo/yara/CAPE/Gandcrab.yar +14 -0
  246. capesolo-0.4.5/CAPEsolo/yara/CAPE/Gootkit.yar +11 -0
  247. capesolo-0.4.5/CAPEsolo/yara/CAPE/Guloader.yar +18 -0
  248. capesolo-0.4.5/CAPEsolo/yara/CAPE/Hancitor.yar +14 -0
  249. capesolo-0.4.5/CAPEsolo/yara/CAPE/Hermes.yar +13 -0
  250. capesolo-0.4.5/CAPEsolo/yara/CAPE/IcedID.yar +18 -0
  251. capesolo-0.4.5/CAPEsolo/yara/CAPE/IcedIDLoader.yar +22 -0
  252. capesolo-0.4.5/CAPEsolo/yara/CAPE/Jaff.yar +14 -0
  253. capesolo-0.4.5/CAPEsolo/yara/CAPE/KoiLoader.yar +35 -0
  254. capesolo-0.4.5/CAPEsolo/yara/CAPE/Kovter.yar +14 -0
  255. capesolo-0.4.5/CAPEsolo/yara/CAPE/Kpot.yar +13 -0
  256. capesolo-0.4.5/CAPEsolo/yara/CAPE/Kronos.yar +14 -0
  257. capesolo-0.4.5/CAPEsolo/yara/CAPE/Latrodectus.yar +34 -0
  258. capesolo-0.4.5/CAPEsolo/yara/CAPE/Lockbit.yar +15 -0
  259. capesolo-0.4.5/CAPEsolo/yara/CAPE/Locky.yar +14 -0
  260. capesolo-0.4.5/CAPEsolo/yara/CAPE/LokiBot.yar +12 -0
  261. capesolo-0.4.5/CAPEsolo/yara/CAPE/Lumma.yar +14 -0
  262. capesolo-0.4.5/CAPEsolo/yara/CAPE/Magniber.yar +11 -0
  263. capesolo-0.4.5/CAPEsolo/yara/CAPE/MassLogger.yar +12 -0
  264. capesolo-0.4.5/CAPEsolo/yara/CAPE/MegaCortex.yar +13 -0
  265. capesolo-0.4.5/CAPEsolo/yara/CAPE/Mole.yar +13 -0
  266. capesolo-0.4.5/CAPEsolo/yara/CAPE/NanoLocker.yar +13 -0
  267. capesolo-0.4.5/CAPEsolo/yara/CAPE/Nemty.yar +13 -0
  268. capesolo-0.4.5/CAPEsolo/yara/CAPE/NetTraveler.yar +14 -0
  269. capesolo-0.4.5/CAPEsolo/yara/CAPE/Nighthawk.yar +24 -0
  270. capesolo-0.4.5/CAPEsolo/yara/CAPE/NitrogenLoader - Copy.yar +18 -0
  271. capesolo-0.4.5/CAPEsolo/yara/CAPE/NitrogenLoader.yar +18 -0
  272. capesolo-0.4.5/CAPEsolo/yara/CAPE/Origin.yar +30 -0
  273. capesolo-0.4.5/CAPEsolo/yara/CAPE/Oyster.yar +19 -0
  274. capesolo-0.4.5/CAPEsolo/yara/CAPE/Pafish.yar +12 -0
  275. capesolo-0.4.5/CAPEsolo/yara/CAPE/PetrWrap.yar +15 -0
  276. capesolo-0.4.5/CAPEsolo/yara/CAPE/Petya.yar +13 -0
  277. capesolo-0.4.5/CAPEsolo/yara/CAPE/PikaBot.yar +45 -0
  278. capesolo-0.4.5/CAPEsolo/yara/CAPE/QakBot.yar +35 -0
  279. capesolo-0.4.5/CAPEsolo/yara/CAPE/QuasarRAT.yar +43 -0
  280. capesolo-0.4.5/CAPEsolo/yara/CAPE/Quickbind.yar +18 -0
  281. capesolo-0.4.5/CAPEsolo/yara/CAPE/RCSession.yar +12 -0
  282. capesolo-0.4.5/CAPEsolo/yara/CAPE/Ramnit.yar +13 -0
  283. capesolo-0.4.5/CAPEsolo/yara/CAPE/Remcos.yar +14 -0
  284. capesolo-0.4.5/CAPEsolo/yara/CAPE/Rhadamanthys.yar +14 -0
  285. capesolo-0.4.5/CAPEsolo/yara/CAPE/RokRat.yar +12 -0
  286. capesolo-0.4.5/CAPEsolo/yara/CAPE/Rozena.yar +10 -0
  287. capesolo-0.4.5/CAPEsolo/yara/CAPE/Ryuk.yar +14 -0
  288. capesolo-0.4.5/CAPEsolo/yara/CAPE/Scarab.yar +13 -0
  289. capesolo-0.4.5/CAPEsolo/yara/CAPE/Sedreco.yar +15 -0
  290. capesolo-0.4.5/CAPEsolo/yara/CAPE/Seduploader.yar +11 -0
  291. capesolo-0.4.5/CAPEsolo/yara/CAPE/SmokeLoader.yar +14 -0
  292. capesolo-0.4.5/CAPEsolo/yara/CAPE/SquirrelWaffle.yar +11 -0
  293. capesolo-0.4.5/CAPEsolo/yara/CAPE/Stealc.yar +13 -0
  294. capesolo-0.4.5/CAPEsolo/yara/CAPE/TClient.yar +11 -0
  295. capesolo-0.4.5/CAPEsolo/yara/CAPE/TSCookie.yar +13 -0
  296. capesolo-0.4.5/CAPEsolo/yara/CAPE/TrickBot.yar +38 -0
  297. capesolo-0.4.5/CAPEsolo/yara/CAPE/Ursnif.yar +19 -0
  298. capesolo-0.4.5/CAPEsolo/yara/CAPE/UrsnifV3.yar +18 -0
  299. capesolo-0.4.5/CAPEsolo/yara/CAPE/Varenyky.yar +11 -0
  300. capesolo-0.4.5/CAPEsolo/yara/CAPE/Vidar.yar +22 -0
  301. capesolo-0.4.5/CAPEsolo/yara/CAPE/WanaCry.yar +16 -0
  302. capesolo-0.4.5/CAPEsolo/yara/CAPE/XWorm.yar +46 -0
  303. capesolo-0.4.5/CAPEsolo/yara/CAPE/XenoRAT.yar +14 -0
  304. capesolo-0.4.5/CAPEsolo/yara/CAPE/ZeroT.yar +15 -0
  305. capesolo-0.4.5/CAPEsolo/yara/CAPE/ZeusPanda.yar +13 -0
  306. capesolo-0.4.5/CAPEsolo/yara/CAPE/Zloader.yar +18 -0
  307. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/A310Logger.yar +37 -0
  308. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AAR.yar +21 -0
  309. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/APT27.yar +101 -0
  310. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ARCrypt.yar +28 -0
  311. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AbubasbanditBot.yar +19 -0
  312. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AcidRain.yar +15 -0
  313. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ActionRAT.yar +35 -0
  314. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Adfind.yar +20 -0
  315. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Adzok.yar +24 -0
  316. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AgentRacoon.yar +18 -0
  317. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AgnianeStealer.yar +26 -0
  318. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Agrius.yar +61 -0
  319. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Akira.yar +25 -0
  320. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Alfonso.yar +28 -0
  321. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AlienCrypter.yar +16 -0
  322. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AlienSpy.yar +47 -0
  323. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Alkhal.yar +23 -0
  324. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AllaKore.yar +33 -0
  325. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Andromeda.yar +29 -0
  326. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Ap0calypse.yar +20 -0
  327. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Apocalypse.yar +19 -0
  328. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Arcom.yar +20 -0
  329. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Arechclient2.yar +34 -0
  330. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ArrowRAT.yar +20 -0
  331. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Aspire.yar +17 -0
  332. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Aurora.yar +22 -0
  333. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Avaddon.yar +21 -0
  334. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Avalon.yar +31 -0
  335. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/AvosLocker.yar +11 -0
  336. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BACKSPACE.yar +22 -0
  337. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BHunt.yar +23 -0
  338. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Babuk.yar +24 -0
  339. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BackNet.yar +18 -0
  340. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BackOffLoader.yar +14 -0
  341. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BackOffPOS.yar +15 -0
  342. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BadJoke.yar +17 -0
  343. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Bagle.yar +18 -0
  344. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Baldr.yar +18 -0
  345. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Bandit.yar +38 -0
  346. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Bandook.yar +58 -0
  347. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Banload.yar +15 -0
  348. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BazarLoader.yar +12 -0
  349. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BazarLoaderNim.yar +13 -0
  350. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Beastdoor.yar +22 -0
  351. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BetaBot.yar +14 -0
  352. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BioPass.yar +25 -0
  353. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BitCoinGrabber.yar +18 -0
  354. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BitRAT.yar +29 -0
  355. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BitterRAT.yar +20 -0
  356. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackByte.yar +15 -0
  357. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackByteGo.yar +22 -0
  358. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackCat.yar +24 -0
  359. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackHunt.yar +17 -0
  360. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackMatter.yar +21 -0
  361. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackNET.yar +27 -0
  362. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackNix.yar +20 -0
  363. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackShades.yar +15 -0
  364. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlackshadesRAT.yar +16 -0
  365. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlankStealer.yar +13 -0
  366. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlitzGrabber.yar +21 -0
  367. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlueBanana.yar +21 -0
  368. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BlueBot.yar +29 -0
  369. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Bobik.yar +16 -0
  370. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BoxCaon.yar +19 -0
  371. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Bozok.yar +19 -0
  372. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BrbBot.yar +19 -0
  373. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BreakStaf.yar +22 -0
  374. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BreakWin.yar +20 -0
  375. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/BroEx.yar +51 -0
  376. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Buran.yar +33 -0
  377. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ButeRAT.yar +19 -0
  378. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CRAT.yar +103 -0
  379. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Caliber.yar +22 -0
  380. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CasperTroy.yar +14 -0
  381. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ChChes.yar +12 -0
  382. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ChaChaDDoS.yar +17 -0
  383. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Chaos.yar +31 -0
  384. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Chinotto.yar +54 -0
  385. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Chuwi.yar +28 -0
  386. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Cicada.yar +26 -0
  387. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ClientMesh.yar +20 -0
  388. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ClipBanker.yar +86 -0
  389. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Clop.yar +25 -0
  390. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CobianRAT.yar +16 -0
  391. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CoinMiners.yar +83 -0
  392. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CoinMiningBot.yar +15 -0
  393. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CommonMagic.yar +17 -0
  394. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Confucius_B.yar +18 -0
  395. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CookieStealer.yar +18 -0
  396. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CoreBot.yar +56 -0
  397. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Covenant.yar +23 -0
  398. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CrimsonRAT.yar +26 -0
  399. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Crown.yar +21 -0
  400. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CryLock.yar +24 -0
  401. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CryptBot.yar +37 -0
  402. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CryptoLocker.yar +24 -0
  403. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CryptoStealerGo.yar +18 -0
  404. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Cuba.yar +18 -0
  405. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Cutlet.yar +27 -0
  406. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CyberGate.yar +23 -0
  407. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/CyberStealer.yar +23 -0
  408. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DECAF.yar +22 -0
  409. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DTstealer.yar +19 -0
  410. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DanaBot.yar +28 -0
  411. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DarkCloud.yar +23 -0
  412. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DarkComet.yar +27 -0
  413. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DarkEye.yar +21 -0
  414. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DarkRAT.yar +21 -0
  415. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DarksideV1.yar +13 -0
  416. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DeathRansom.yar +19 -0
  417. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DecryptMyFiles.yar +18 -0
  418. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DeepRats.yar +31 -0
  419. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Dharma.yar +10 -0
  420. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Diavol.yar +27 -0
  421. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DiscoNightClub.yar +20 -0
  422. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DoejoCrypt.yar +18 -0
  423. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Downloaders.yar +492 -0
  424. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Dridex.yar +22 -0
  425. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/DuckTail.yar +30 -0
  426. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Duke.yar +61 -0
  427. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Echelon.yar +23 -0
  428. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Egregor.yar +40 -0
  429. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Ekans.yar +30 -0
  430. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Enfal.yar +11 -0
  431. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/EnigmaStub.yar +22 -0
  432. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/EpicenterRAT.yar +24 -0
  433. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Epsilon.yar +34 -0
  434. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/EspioLoader.yar +14 -0
  435. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/EvilGrab.yar +19 -0
  436. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ExMatter.yar +22 -0
  437. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Exaramel.yar +39 -0
  438. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ExpressCMS.yar +17 -0
  439. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FPSpy.yar +32 -0
  440. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FYAnti.yar +10 -0
  441. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Fabookie.yar +41 -0
  442. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FakeWMI.yar +18 -0
  443. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Farfli.yar +14 -0
  444. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FatalRAT.yar +20 -0
  445. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Fiber.yar +38 -0
  446. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Ficker.yar +18 -0
  447. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FirebirdRAT.yar +24 -0
  448. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Flagpro.yar +19 -0
  449. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FloodFix.yar +10 -0
  450. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FoggyWeb.yar +18 -0
  451. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Fonix.yar +23 -0
  452. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Foxgrabber.yar +15 -0
  453. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/FujinamaRAT.yar +16 -0
  454. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/G0Crypt.yar +35 -0
  455. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GDriveRAT.yar +20 -0
  456. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GarrantDecrypt.yar +16 -0
  457. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Gasket.yar +32 -0
  458. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Gaudox.yar +12 -0
  459. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Gelsemium.yar +84 -0
  460. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GetCrypt.yar +54 -0
  461. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GhostEmperor.yar +10 -0
  462. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GloomaneStealer.yar +18 -0
  463. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GoBrut.yar +57 -0
  464. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Godzilla.yar +20 -0
  465. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GoldenAxe.yar +22 -0
  466. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GoldenSpy.yar +14 -0
  467. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GraphicalProton.yar +17 -0
  468. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GravityRAT.yar +24 -0
  469. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Greame.yar +24 -0
  470. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/GreetingGhoul.yar +19 -0
  471. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Guidlma.yar +20 -0
  472. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Gulpix.yar +33 -0
  473. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HDLocker.yar +16 -0
  474. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HakunaMatata.yar +32 -0
  475. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HawkEye.yar +24 -0
  476. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HawkEyeV9.yar +26 -0
  477. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Hello.yar +13 -0
  478. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Heracles.yar +30 -0
  479. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HiddenVNC.yar +22 -0
  480. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HiddenWasp.yar +25 -0
  481. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Hive.yar +39 -0
  482. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HorusEyesRAT.yar +18 -0
  483. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Houdini.yar +92 -0
  484. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HttpBrowser.yar +19 -0
  485. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/HyperBro.yar +19 -0
  486. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKing.yar +22 -0
  487. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKingKeylogger.yar +16 -0
  488. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKingKingOfHearts.yar +22 -0
  489. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKingQueenOfClubs.yar +16 -0
  490. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKingQueenOfHearts.yar +19 -0
  491. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IAmTheKingScrCap.yar +16 -0
  492. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/IRCBot.yar +50 -0
  493. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ISRStealer.yar +17 -0
  494. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Imminent.yar +26 -0
  495. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Impacket.yar +32 -0
  496. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Infinity.yar +22 -0
  497. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/InfinityLock.yar +20 -0
  498. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/InvalidPrinter.yar +11 -0
  499. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JSSLoader.yar +32 -0
  500. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JanelaRAT.yar +22 -0
  501. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JavaDropper.yar +22 -0
  502. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JennLog.yar +18 -0
  503. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JesterStealer.yar +22 -0
  504. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/JoeGo.yar +21 -0
  505. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Jupyter.yar +18 -0
  506. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KLogExe.yar +20 -0
  507. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KPortScan.yar +28 -0
  508. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KTLVdoor.yar +35 -0
  509. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Karagany.yar +61 -0
  510. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Karkoff.yar +17 -0
  511. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KdcSponge.yar +33 -0
  512. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KeyBase.yar +33 -0
  513. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Khonsari.yar +14 -0
  514. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KillMBR.yar +13 -0
  515. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Kimsuky.yar +24 -0
  516. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Kinsing.yar +17 -0
  517. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Kitty.yar +20 -0
  518. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KlingonRAT.yar +24 -0
  519. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KoadicBAT.yar +12 -0
  520. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KoadicDOC.yar +16 -0
  521. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KoadicJS.yar +22 -0
  522. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Konni.yar +20 -0
  523. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Koxic.yar +20 -0
  524. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/KrakenStealer.yar +22 -0
  525. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Kutaki.yar +15 -0
  526. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LCPDot.yar +21 -0
  527. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LOLKEK.yar +19 -0
  528. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LaZagne.yar +20 -0
  529. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LapLas.yar +28 -0
  530. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LastConn.yar +31 -0
  531. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Laturo.yar +24 -0
  532. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LegionLocker.yar +20 -0
  533. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Leivion.yar +15 -0
  534. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LightHand.yar +29 -0
  535. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LilithRAT.yar +25 -0
  536. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LimeRAT.yar +18 -0
  537. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LockDown.yar +15 -0
  538. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LockFile.yar +18 -0
  539. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Locked.yar +18 -0
  540. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LokiLocker.yar +27 -0
  541. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Lorenz.yar +32 -0
  542. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LostDoor.yar +24 -0
  543. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Lu0Bot.yar +19 -0
  544. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LuminosityLink.yar +25 -0
  545. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/LuxNet.yar +20 -0
  546. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/M00nD3v.yar +23 -0
  547. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MB150.yar +28 -0
  548. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Macoute.yar +24 -0
  549. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Maktub.yar +16 -0
  550. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Mangzamel.yar +18 -0
  551. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MargulasRAT.yar +26 -0
  552. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MarkiRAT.yar +25 -0
  553. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MatanbuchusLoader.yar +26 -0
  554. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Matiex.yar +21 -0
  555. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Maze.yar +30 -0
  556. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MediaPI.yar +18 -0
  557. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MedusaLocker.yar +32 -0
  558. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Megumin.yar +24 -0
  559. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Mercurial.yar +22 -0
  560. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Meteorite.yar +18 -0
  561. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Meterpreter.yar +28 -0
  562. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Milan.yar +65 -0
  563. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Mimikatz.yar +94 -0
  564. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MiniTor.yar +29 -0
  565. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MoDiRAT.yar +18 -0
  566. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ModiLoader.yar +39 -0
  567. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Motocos.yar +17 -0
  568. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/MountLocker.yar +17 -0
  569. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Mystic.yar +16 -0
  570. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NGLite.yar +24 -0
  571. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NLBrute.yar +15 -0
  572. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NPPSpy.yar +24 -0
  573. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NWorm.yar +21 -0
  574. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NanoCore.yar +26 -0
  575. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Nefilim.yar +26 -0
  576. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Neptune.yar +24 -0
  577. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Nermer.yar +28 -0
  578. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Neshta.yar +11 -0
  579. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NetSupport.yar +12 -0
  580. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/NetWire.yar +45 -0
  581. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Neteagle.yar +17 -0
  582. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Netwalker.yar +12 -0
  583. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Niribu.yar +19 -0
  584. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Nitol.yar +30 -0
  585. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Nitro.yar +26 -0
  586. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Njrat.yar +49 -0
  587. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Nodachi.yar +17 -0
  588. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ObliqueRAT.yar +22 -0
  589. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Octopus.yar +24 -0
  590. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/OnlyLogger.yar +21 -0
  591. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/OrcaRAT.yar +16 -0
  592. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/OrcusRAT.yar +28 -0
  593. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Orion.yar +22 -0
  594. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Osno.yar +37 -0
  595. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Owowa.yar +20 -0
  596. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/OzoneRAT.yar +25 -0
  597. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PCRat.yar +29 -0
  598. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PLEAD.yar +25 -0
  599. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PWSHCUMII.yar +17 -0
  600. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PYSA.yar +21 -0
  601. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PandaStealer.yar +18 -0
  602. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Pandora.yar +27 -0
  603. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Paradox.yar +21 -0
  604. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Parallax.yar +16 -0
  605. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PatchWork.yar +20 -0
  606. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PhemedroneStealer.yar +23 -0
  607. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Phobos.yar +15 -0
  608. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Phoenix.yar +27 -0
  609. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Phorpiex.yar +21 -0
  610. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PillowMint.yar +18 -0
  611. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PingBack.yar +21 -0
  612. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PirateStealer.yar +18 -0
  613. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Plasma.yar +23 -0
  614. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Plurox.yar +14 -0
  615. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PoisonIvy.yar +24 -0
  616. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Polar.yar +22 -0
  617. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PondRAT.yar +17 -0
  618. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PoolRAT.yar +17 -0
  619. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PoshKeylogger.yar +17 -0
  620. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Poullight.yar +20 -0
  621. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PovertyStealer.yar +14 -0
  622. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PowerPool.yar +16 -0
  623. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PredatorPain.yar +28 -0
  624. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ProLock.yar +17 -0
  625. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Prometei.yar +26 -0
  626. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ProtonBot.yar +18 -0
  627. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Prynt.yar +23 -0
  628. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Punisher.yar +21 -0
  629. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PureLoader.yar +18 -0
  630. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Purge.yar +25 -0
  631. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PurpleWave.yar +19 -0
  632. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Pyrogenic.yar +14 -0
  633. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/PythoRAT.yar +22 -0
  634. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QRat.yar +22 -0
  635. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QiwxxRAT.yar +14 -0
  636. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QnapCrypt.yar +30 -0
  637. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Quantum.yar +26 -0
  638. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QuasarStealer.yar +16 -0
  639. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QuilClipper.yar +20 -0
  640. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/QuiteRAT.yar +16 -0
  641. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Qulab.yar +25 -0
  642. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/R77.yar +29 -0
  643. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RDPWrap.yar +20 -0
  644. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/REvil.yar +19 -0
  645. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RHttpCtrl.yar +18 -0
  646. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Raccoon.yar +177 -0
  647. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RageStealer.yar +17 -0
  648. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RagnarLocker.yar +17 -0
  649. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RansomEXX.yar +43 -0
  650. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RanumBot.yar +35 -0
  651. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RanzyLocker.yar +25 -0
  652. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Rapid.yar +23 -0
  653. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Rasftuby.yar +18 -0
  654. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Ratty.yar +21 -0
  655. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RedLeaf.yar +11 -0
  656. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RedLine.yar +139 -0
  657. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Redsip.yar +11 -0
  658. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RemoteUtilitiesRAT.yar +17 -0
  659. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Renamer.yar +26 -0
  660. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Responder.yar +29 -0
  661. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Retefe.yar +14 -0
  662. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RevCodeRAT.yar +48 -0
  663. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RevengeRAT.yar +27 -0
  664. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ReverseRAT.yar +21 -0
  665. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Rhysida.yar +16 -0
  666. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Rietspoof.yar +31 -0
  667. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RisePro.yar +32 -0
  668. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Robbinhood.yar +23 -0
  669. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RomCom.yar +49 -0
  670. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RootTeamStealer.yar +18 -0
  671. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Rsjon.yar +31 -0
  672. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RunningRAT.yar +37 -0
  673. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RustyBuer.yar +12 -0
  674. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/RustyStealer.yar +25 -0
  675. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/S05Kitty.yar +23 -0
  676. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SNAKEImplant.yar +23 -0
  677. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/STEALDEAL.yar +15 -0
  678. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/STOP.yar +22 -0
  679. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Salfram.yar +10 -0
  680. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SapphireStealer.yar +20 -0
  681. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Satan.yar +28 -0
  682. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Satana.yar +18 -0
  683. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ScoutElite.yar +115 -0
  684. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SectopRAT.yar +27 -0
  685. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Sfile.yar +35 -0
  686. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ShadowTech.yar +21 -0
  687. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SideWalk.yar +22 -0
  688. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SilentMoon.yar +22 -0
  689. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Simda.yar +18 -0
  690. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SimplePacker.yar +13 -0
  691. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SlackBot.yar +43 -0
  692. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Sliver.yar +20 -0
  693. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SlothfulMedia.yar +28 -0
  694. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SmallNet.yar +19 -0
  695. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Sn0wLogger.yar +18 -0
  696. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Snake.yar +30 -0
  697. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Snatch.yar +31 -0
  698. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SoftCNApp.yar +19 -0
  699. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SolarMarker.yar +20 -0
  700. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SoranoStealer.yar +26 -0
  701. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Spacecolon.yar +22 -0
  702. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Spectre.yar +16 -0
  703. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SpyEye.yar +17 -0
  704. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SpyGate.yar +26 -0
  705. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Spyro.yar +28 -0
  706. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Stealerium.yar +17 -0
  707. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SteamHook.yar +16 -0
  708. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/StormKitty.yar +18 -0
  709. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/StrelaStealer.yar +18 -0
  710. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/StrifeWater.yar +27 -0
  711. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/StrongPity.yar +16 -0
  712. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Strrat.yar +13 -0
  713. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Sub7Nation.yar +28 -0
  714. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SunCrypt.yar +40 -0
  715. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SunShuttle.yar +24 -0
  716. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Surtr.yar +24 -0
  717. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SweetyStealer.yar +20 -0
  718. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/SystemBC.yar +46 -0
  719. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/T5000.yar +30 -0
  720. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TJKeylogger.yar +16 -0
  721. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TManager.yar +21 -0
  722. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TOITOIN.yar +39 -0
  723. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TRAT.yar +16 -0
  724. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TWarBot.yar +17 -0
  725. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TYRAT.yar +15 -0
  726. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Taidoor.yar +17 -0
  727. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Tardigrade.yar +30 -0
  728. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Taurus.yar +38 -0
  729. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Tefosteal.yar +22 -0
  730. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TeslaRevenge.yar +22 -0
  731. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Thanos.yar +34 -0
  732. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TigerRAT.yar +20 -0
  733. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TimeTime.yar +18 -0
  734. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Tofsee.yar +18 -0
  735. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Tomiris.yar +25 -0
  736. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Torisma.yar +18 -0
  737. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ToxicEye.yar +20 -0
  738. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TreasureHunter.yar +28 -0
  739. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TrickbotModule.yar +23 -0
  740. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/TrueBot.yar +22 -0
  741. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Turian.yar +35 -0
  742. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/UDPRat.yar +17 -0
  743. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/UNKInfostealer.yar +22 -0
  744. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/UltraSurf.yar +17 -0
  745. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/UmbralStealer.yar +23 -0
  746. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Underground.yar +25 -0
  747. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Unicorn.yar +32 -0
  748. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/UnlockYourFiles.yar +21 -0
  749. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Unrecom.yar +19 -0
  750. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/VSSDestroy.yar +23 -0
  751. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ValidAlpha.yar +18 -0
  752. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/VanillaRAT.yar +22 -0
  753. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/VenomRAT.yar +34 -0
  754. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Vertex.yar +23 -0
  755. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/VirLock.yar +20 -0
  756. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/VirusRat.yar +26 -0
  757. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Vovalex.yar +15 -0
  758. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Vulturi.yar +27 -0
  759. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/W1RAT.yar +18 -0
  760. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WCE.yar +52 -0
  761. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WSHRAT.yar +38 -0
  762. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Warezov.yar +16 -0
  763. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WarzoneRAT.yar +28 -0
  764. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WellMess.yar +21 -0
  765. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WhiffyRecon.yar +22 -0
  766. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WinDealer.yar +34 -0
  767. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WinGo.yar +13 -0
  768. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WobbyChipMBR.yar +18 -0
  769. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/WorldWind.yar +23 -0
  770. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/XFiles.yar +33 -0
  771. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/XiaoBa.yar +19 -0
  772. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/XorStringsNET.yar +15 -0
  773. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Xorist.yar +22 -0
  774. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/XpertRAT.yar +28 -0
  775. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Xtreme.yar +20 -0
  776. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ZXShell.yar +51 -0
  777. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Zegost.yar +28 -0
  778. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Zeoticus.yar +22 -0
  779. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Zeppelin.yar +25 -0
  780. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/Ziggy.yar +23 -0
  781. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/ZombieBoy.yar +11 -0
  782. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/adWind.yar +18 -0
  783. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/iTranslator.yar +39 -0
  784. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/jRat.yar +23 -0
  785. capesolo-0.4.5/CAPEsolo/yara/CAPE_community/xRAT.yar +28 -0
  786. capesolo-0.4.5/CAPEsolo/yara/binaries/HeavensGate.yar +15 -0
  787. capesolo-0.4.5/CAPEsolo/yara/binaries/Themida.yar +11 -0
  788. capesolo-0.4.5/PKG-INFO +52 -0
  789. capesolo-0.4.5/README.md +26 -0
  790. capesolo-0.4.5/pyproject.toml +30 -0
capesolo-0.4.5/CAPEsolo/__init__.py ADDED
File without changes
capesolo-0.4.5/CAPEsolo/analysis_conf.default ADDED
@@ -0,0 +1,30 @@
1
+ [analysis]
2
+ id = 2
3
+ ip = 127.0.0.1
4
+ port = 9999
5
+ category = file
6
+ terminate_processes = False
7
+ enable_trim = 1
8
+ file_type =
9
+ exports =
10
+ amsi = True
11
+ browser = True
12
+ curtain = True
13
+ digisig = True
14
+ disguise = True
15
+ evtx = False
16
+ human_windows = False
17
+ procmon = False
18
+ recentfiles = False
19
+ screenshots_windows = False
20
+ sysmon_windows = False
21
+ tlsdump = True
22
+ usage = False
23
+ file_pickup = True
24
+ permissions = False
25
+ pre_script = False
26
+ during_script = False
27
+ filecollector = True
28
+ windows_static_route = False
29
+ upload_max_size = 300000000
30
+ syscall = 1