DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Will close for now as I can get away with configextractor-py to support up to Python 3.11 without having to change the construct dependency to support MWCP parsers in Assemblyline.
We are currently in the process of updating our setup from Python 3.8 to 3.11. At which point we will update MWCP to support 3.9+. We also hope to be able to update the construct helpers to work with 3.12.
Will close for now as I can get away with configextractor-py to support up to Python 3.11 without having to change the construct dependency to support MWCP parsers in Assemblyline.