{"adoption": {"forks": 306, "observed_at": "2026-08-28T04:03:39.562361+00:00", "stars": 1120}, "canonical_url": "https://ross.abutalabs.com/products/ratdecoders", "card": {"archived": false, "artifact_type": "library", "description": "Python Decoders for Common Remote Access Trojans", "domain": ["security", "reverse-engineering", "developer-tools"], "enriched": true, "function": ["parser", "security", "developer-tools", "cli"], "health_score": 20, "homepage": null, "language": "Python", "license": "MIT", "license_family": "permissive", "maturity": "maintenance", "member_repos": ["kevthehermit/RATDecoders"], "name": "kevthehermit/RATDecoders", "platform": ["python", "cli", "cross-platform"], "pushed_at": "2024-07-16T06:32:07+00:00", "repo": "kevthehermit/RATDecoders", "stars": 1120, "tags": ["malware-analysis", "malware-configuration-extraction", "remote-access-trojans", "incident-response", "yara", "threat-intelligence"], "topics": [], "urls": [], "use_cases": ["extract configuration from a malware sample", "identify which RAT family a binary belongs to", "parse C2 server addresses from malware configs", "integrate malware config extraction into an analysis pipeline", "bulk analyze a directory of malware samples", "support incident response with malware configuration data"], "what_it_is": "A Python library and CLI tool (malconf) that statically analyzes malware samples from common Remote Access Trojan (RAT) families and extracts their embedded configuration data. It supports dozens of RAT families like DarkComet, njRat, and NanoCore, and can be embedded in automated malware analysis pipelines.", "when_to_avoid": ["you need dynamic malware analysis or sandboxing", "the malware family is not in the supported RAT list", "you need general-purpose reverse engineering rather than config extraction"], "when_to_choose": ["you need to statically extract configs from known RAT families", "you are an incident responder or malware analyst handling common RATs", "you want a pip-installable library for automated malware triage"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/ratdecoders", "repo": "kevthehermit/RATDecoders", "role": "main", "score": 32}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:03:39.562361+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T06:41:06.559633+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "92df300f2b54f30fa57bcc85fb91600901573aaccf0d89b8f56f1e873ee2a44a", "fetched_at": "2026-08-28T04:03:39.562361+00:00", "kind": "readme", "missing": false, "url": "https://github.com/kevthehermit/RATDecoders"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4540, "days_push": 778, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 32, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}