Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
47,133 repositories indexed
1–4 of 4 · Most stars
Malware Configuration And Payload Extraction
Scan files or process memory for CobaltStrike beacons and parse their configuration
Volatility plugin for extracts configuration data of known malware
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.