CAPEv2

CAPE: Malware Configuration And Payload Extraction - Documentation CAPE is a malware sandbox. A sandbox is used to execute malicious files in an isolated environment whilst instrumenting their dynamic behaviour and collecting forensic artefacts. CAPE was derived from Cuckoo v1 which features the...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

CVE-2025-61301

CVE-2025-61301 - CAPEv2: Denegación de Análisis mediante bifurcación recursiva de procesos Descripción Una vulnerabilidad de Alta Gravedad de denegación de análisis afecta a reporting/mongodb.py y reporting/jsondump.py en CAPEv2 commit 52e4b43, del 2025-05-17 que permite a atacantes que pueden...

CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...