cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.52k stars 1.7k forks source link

Behavioral Analysis #1544

Open anle18 opened 7 years ago

anle18 commented 7 years ago

hi all,

after i analysis a file, i want to see Behavioral Analysis. but when i chosse Behavioral Analysis tag, it have nothing.

image

thanks !!!

doomedraven commented 7 years ago

no logs no problem

anle18 commented 7 years ago

thank for reply

doomedraven commented 7 years ago

if you want help, provide logs, without logs that impossible to help you

anle18 commented 7 years ago

yes.. thanks !!! do you know why this error:

The PCAP file does not exist at path "/home/sml/.cuckoo/storage/analyses/19/dump.pcap".

doomedraven commented 7 years ago

yes file not exists :D provide whole log

anle18 commented 7 years ago

yes.. this is my log

2017-05-12 15:57:58,239 [cuckoo] INFO: $ cuckoo community
2017-05-12 15:57:58,240 [cuckoo.core.scheduler] INFO: Using "virtualbox" as machine manager
2017-05-12 15:57:59,154 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s
2017-05-12 15:57:59,173 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks.
2017-05-12 15:58:05,294 [cuckoo.core.startup] DEBUG: Imported modules...
2017-05-12 15:58:05,298 [cuckoo.core.startup] DEBUG: Imported "auxiliary" modules:
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- MITM
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- Reboot
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- Services
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     `-- Sniffer
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG: Imported "machinery" modules:
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- vSphere
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- KVM
2017-05-12 15:58:05,299 [cuckoo.core.startup] DEBUG:     |-- ESX
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- XenServer
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- VirtualBox
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- Avd
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- QEMU
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- VMware
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     `-- Physical
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG: Imported "processing" modules:
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- AnalysisInfo
2017-05-12 15:58:05,300 [cuckoo.core.startup] DEBUG:     |-- ApkInfo
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Baseline
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- BehaviorAnalysis
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Debug
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Droidmon
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Dropped
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- DroppedBuffer
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- GooglePlay
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Irma
2017-05-12 15:58:05,301 [cuckoo.core.startup] DEBUG:     |-- Memory
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- MetaInfo
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- MISP
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- NetworkAnalysis
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- ProcessMemory
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- Procmon
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- Screenshots
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- Snort
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- Static
2017-05-12 15:58:05,302 [cuckoo.core.startup] DEBUG:     |-- Strings
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     |-- Suricata
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     |-- TargetInfo
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     |-- TLSMasterSecrets
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     `-- VirusTotal
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG: Imported "signatures" modules:
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     |-- CreatesExe
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     `-- SystemMetrics
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG: Imported "reporting" modules:
2017-05-12 15:58:05,303 [cuckoo.core.startup] DEBUG:     |-- ElasticSearch
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- Feedback
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- JsonDump
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- Mattermost
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- MISP
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- Moloch
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- MongoDB
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     |-- Notification
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG:     `-- SingleFile
2017-05-12 15:58:05,304 [cuckoo.core.startup] DEBUG: Checking for locked tasks..
2017-05-12 15:58:05,316 [cuckoo.core.startup] DEBUG: Checking for pending service tasks..
2017-05-12 15:58:05,324 [cuckoo.core.startup] DEBUG: Initializing Yara...
2017-05-12 15:58:05,324 [cuckoo.core.startup] DEBUG:     |-- binaries embedded.yar
2017-05-12 15:58:05,325 [cuckoo.core.startup] DEBUG:     |-- binaries shellcodes.yar
2017-05-12 15:58:05,325 [cuckoo.core.startup] DEBUG:     `-- binaries vmdetect.yar
2017-05-12 15:58:05,327 [cuckoo] WARNING: It appears that you haven't loaded any Cuckoo Signatures. Signatures are highly recommended and improve & enrich the information extracted during an analysis. They also make up for the analysis score that you see in the Web Interface - so, pretty important!
2017-05-12 15:58:05,327 [cuckoo] WARNING: You'll be able to fetch all the latest Cuckoo Signaturs, Yara rules, and more goodies by running the following command:
2017-05-12 15:58:05,328 [cuckoo] INFO: $ cuckoo community
2017-05-12 15:58:05,328 [cuckoo.core.resultserver] DEBUG: ResultServer running on 192.168.56.1:2042.
2017-05-12 15:58:05,329 [cuckoo.core.scheduler] INFO: Using "virtualbox" as machine manager
2017-05-12 15:58:09,451 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm SML_XP
2017-05-12 15:58:09,599 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine SML_XP to SML_Snap03
2017-05-12 15:58:09,869 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s
2017-05-12 15:58:09,889 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks.
2017-05-12 15:58:28,509 [cuckoo.core.scheduler] DEBUG: Processing task #19
2017-05-12 15:58:28,525 [cuckoo.core.scheduler] INFO: Starting analysis of FILE "abc.txt" (task #19, options "")
2017-05-12 15:58:28,599 [cuckoo.core.scheduler] INFO: Task #19: acquired machine cuckoo1 (label=SML_XP)
2017-05-12 15:58:28,672 [cuckoo.machinery.virtualbox] DEBUG: Starting vm SML_XP
2017-05-12 15:58:28,947 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine SML_XP to SML_Snap03
2017-05-12 15:58:32,034 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=192.168.56.101)
2017-05-12 15:58:33,039 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet
2017-05-12 15:58:34,044 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet
2017-05-12 15:58:35,049 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet
2017-05-12 15:58:36,054 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet
2017-05-12 15:58:37,059 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet
2017-05-12 15:58:37,075 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.7 (id=cuckoo1, ip=192.168.56.101)
2017-05-12 15:58:37,093 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=cuckoo1, ip=192.168.56.101, monitor=latest, size=1770964)
2017-05-12 15:58:37,302 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:37,366 [cuckoo.core.resultserver] DEBUG: LogHandler for live analysis.log initialized.
2017-05-12 15:58:38,111 [cuckoo.core.resultserver] DEBUG: New process (pid=3296, ppid=2852, name=cmd.exe)
2017-05-12 15:58:38,272 [cuckoo.core.resultserver] DEBUG: New process (pid=3316, ppid=3296, name=notepad.exe)
2017-05-12 15:58:38,310 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:39,318 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:40,328 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:41,337 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:42,346 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:43,357 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:44,368 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:45,377 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:46,387 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:47,396 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:48,406 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:49,415 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:50,425 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:51,432 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:52,441 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:53,450 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:54,461 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:55,472 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:56,482 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:57,490 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:58,500 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:58:59,506 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:00,512 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:01,521 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:02,528 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:03,534 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:04,540 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:05,548 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:06,557 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:07,564 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:08,573 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:09,580 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:10,590 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:11,600 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:12,610 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:13,622 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:14,630 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:15,639 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:16,648 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:17,657 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:18,667 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:19,676 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:20,685 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:21,695 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:22,704 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:23,714 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:24,721 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:25,731 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:26,740 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:27,751 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:28,761 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:29,770 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:30,780 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:31,789 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:32,799 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:33,807 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:34,818 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:35,828 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:36,839 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:37,849 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:38,855 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:39,864 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:40,873 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:41,880 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:42,891 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:43,899 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:44,908 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:45,917 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:46,924 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:47,934 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:48,943 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:49,953 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:50,962 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:51,971 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:52,979 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:53,989 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:54,999 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:56,009 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:57,018 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:58,026 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 15:59:59,036 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:00,046 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:01,057 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:02,066 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:03,076 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:04,085 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:05,094 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:06,103 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:07,113 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:08,123 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:09,132 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:10,141 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:11,151 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:12,161 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:13,172 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:14,181 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:15,190 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:16,199 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:17,209 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:18,218 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:19,227 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:20,236 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:21,245 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:22,254 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:23,265 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:24,275 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:25,284 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:26,293 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:27,303 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:28,313 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:29,323 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:30,332 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:31,342 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:32,350 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:33,360 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:34,368 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:35,379 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:36,387 [cuckoo.core.guest] DEBUG: cuckoo1: analysis still processing
2017-05-12 16:00:37,392 [cuckoo.core.guest] INFO: cuckoo1: analysis completed successfully
2017-05-12 16:00:37,465 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm SML_XP
2017-05-12 16:00:40,982 [cuckoo.core.scheduler] DEBUG: Released database task #19
2017-05-12 16:00:41,011 [cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,045 [cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,046 [cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,046 [cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,047 [cuckoo.core.plugins] DEBUG: Executed processing module "MetaInfo" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,047 [cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,047 [cuckoo.core.plugins] DEBUG: Executed processing module "Procmon" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,047 [cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,050 [cuckoo.core.plugins] DEBUG: Executed processing module "Static" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,051 [cuckoo.core.plugins] DEBUG: Executed processing module "Strings" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,054 [cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,055 [cuckoo.processing.network] WARNING: The PCAP file does not exist at path "/home/sml/.cuckoo/storage/analyses/19/dump.pcap".
2017-05-12 16:00:41,055 [cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,055 [cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,059 [cuckoo.core.plugins] DEBUG: Executed processing module "Debug" on analysis at "/home/sml/.cuckoo/storage/analyses/19"
2017-05-12 16:00:41,059 [cuckoo.core.plugins] DEBUG: Running 0 signatures
2017-05-12 16:00:41,207 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump"
2017-05-12 16:00:41,262 [cuckoo.core.plugins] DEBUG: Executed reporting module "SingleFile"
2017-05-12 16:00:41,306 [cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB"
2017-05-12 16:00:41,306 [cuckoo.core.scheduler] INFO: Task #19: reports generation completed (path=/home/sml/.cuckoo/storage/analyses/19)
2017-05-12 16:00:41,488 [cuckoo.core.scheduler] INFO: Task #19: analysis procedure completed
jbremer commented 7 years ago

@anle18 what OS is your guest running?

anle18 commented 7 years ago

hi, i used ubuntu 16.04 and in my virutalbox i used window xp

jbremer commented 7 years ago

That's kind of weird. It's saying that new processes were created, which means that the behavioral logs are dumped. Did you disable something in processing.conf? Or did you resolve this issue already in the meantime @anle18?

posi91 commented 7 years ago

I am using virtualbox and in the guest operating system on windows xp, what I see is that the error is presented in the following logs, where you can not load the signatures. I could help with some guide to solve the error, thanks

17-07-12 08:19:53,283 [cuckoo.core.resultserver] DEBUG: ResultServer running on 192.168.56.1:2042. 2017-07-12 08:19:53,288 [cuckoo.core.scheduler] INFO: Using "virtualbox" as machine manager 2017-07-12 08:19:54,205 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm windowsxp 2017-07-12 08:19:55,694 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine windowsxp to snapshot1 2017-07-12 08:19:55,931 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s 2017-07-12 08:19:55,974 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks. 2017-07-12 08:41:00,372 [cuckoo.core.scheduler] DEBUG: Processing task #5 2017-07-12 08:41:00,399 [cuckoo.core.scheduler] INFO: Starting analysis of FILE "karapkay.exe" (task #5, options "procmemdump=yes,route=none") 2017-07-12 08:41:00,469 [cuckoo.core.scheduler] INFO: Task #5: acquired machine windowsxp (label=windowsxp) 2017-07-12 08:41:00,494 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 4910 (interface=vboxnet0, host=192.168.56.10, pcap=/home/labs/.cuckoo/storage/analyses/5/dump.pcap) 2017-07-12 08:41:00,495 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Sniffer 2017-07-12 08:41:00,581 [cuckoo.machinery.virtualbox] DEBUG: Starting vm windowsxp 2017-07-12 08:41:00,857 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine windowsxp to snapshot1 2017-07-12 08:41:04,583 [cuckoo.core.guest] INFO: Starting analysis on guest (id=windowsxp, ip=192.168.56.10) 2017-07-12 08:41:05,606 [cuckoo.core.guest] DEBUG: windowsxp: not ready yet 2017-07-12 08:41:06,612 [cuckoo.core.guest] DEBUG: windowsxp: not ready yet 2017-07-12 08:41:07,603 [cuckoo.core.guest] DEBUG: windowsxp: not ready yet 2017-07-12 08:41:09,610 [cuckoo.core.guest] DEBUG: windowsxp: not ready yet 2017-07-12 08:41:30,251 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.7 (id=windowsxp, ip=192.168.56.10) 2017-07-12 08:42:09,362 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=windowsxp, ip=192.168.56.10, monitor=latest, size=1770964) 2017-07-12 08:43:29,598 [cuckoo.core.resultserver] DEBUG: LogHandler for live analysis.log initialized. 2017-07-12 08:43:40,764 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0001.jpg 2017-07-12 08:43:40,803 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 115002 2017-07-12 08:43:42,040 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0002.jpg 2017-07-12 08:43:42,105 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 114017 2017-07-12 08:43:47,987 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:43:53,996 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:43:54,002 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:00,012 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:00,016 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:06,028 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:06,033 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:12,040 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:12,044 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:18,051 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:18,055 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:24,064 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:24,068 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:30,076 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:30,080 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:36,088 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:36,092 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:37,098 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1bf90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:37,104 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:38,109 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad36f50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:38,114 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:39,118 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67005f510>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:39,124 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:40,130 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad34950>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:40,134 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:41,138 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66abf0b50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:41,142 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:42,146 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb30d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:42,151 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:43,158 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb3950>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:43,165 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:44,169 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb3dd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:44,174 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:45,178 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a410>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:45,182 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:46,189 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ac7d6d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:46,196 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:47,201 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1be90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:47,204 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:53,213 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:44:53,219 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:54,224 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad09410>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:54,227 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:55,231 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1be90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:55,235 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:56,239 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a750>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:56,243 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:57,247 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa2e450>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:57,252 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:58,255 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1e910>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:58,259 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:44:59,265 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe6700a6a50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:44:59,271 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:00,275 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67005f410>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:00,279 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:01,286 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1aad0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:01,290 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:02,298 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ab485d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:02,303 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:03,307 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67005f410>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:03,311 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:04,314 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aceab50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:04,319 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:05,323 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe670068250>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:05,326 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:06,330 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ae84dd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:06,334 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:12,343 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:45:12,348 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:13,353 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66abf0ed0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:13,357 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:14,361 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67005f350>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:14,366 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:15,372 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe670068bd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:15,375 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:16,379 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ac14f50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:16,388 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:17,393 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af57e10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:17,398 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:18,405 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67004ec50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:18,410 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:19,414 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad342d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:19,419 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:20,422 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb7910>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:20,426 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:21,431 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67004e650>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:21,435 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:22,443 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1b850>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:22,447 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:23,452 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ab48990>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:23,459 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:24,464 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa2ea90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:24,469 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:25,473 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa2e150>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:25,477 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:26,481 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa2ed10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:26,484 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:32,491 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:45:32,497 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:33,503 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe670068810>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:33,508 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:34,512 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad36950>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:34,516 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:35,520 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1e1d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:35,526 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:36,530 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad36ad0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:36,535 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:37,540 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acea890>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:37,543 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:38,547 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ac46b90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:38,550 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:39,554 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af575d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:39,559 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:40,564 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe6700a6510>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:40,568 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:41,572 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe6700a6ad0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:41,576 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:42,579 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe6700a6cd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:42,583 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:43,587 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a690>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:43,591 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:44,595 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67004eb90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:44,599 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:45,604 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa2ec10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:45,608 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:51,618 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:45:51,622 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:52,626 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1bf90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:52,630 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:53,635 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1bdd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:53,642 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:54,646 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb7c10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:54,649 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:55,655 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67004e1d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:55,658 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:56,663 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ae84f50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:56,667 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:57,671 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb79d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:57,674 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:58,679 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aca8ad0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:58,682 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:45:59,687 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ab82d90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:45:59,691 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:00,695 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ac6fb50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:00,699 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:01,704 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aca8d50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:01,708 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:02,712 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe670068990>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:02,716 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:03,721 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1e110>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:03,726 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:04,735 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a810>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:04,741 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:10,748 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:46:10,752 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:11,757 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af57e90>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:11,763 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:12,768 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a250>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:12,771 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:13,778 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66abf0c10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:13,782 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:14,791 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb7b10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:14,795 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:15,800 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb7b50>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:15,803 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:16,808 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe670037ad0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:16,812 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:17,816 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67009dcd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:17,819 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:18,824 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1b950>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:18,828 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:19,833 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af35350>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:19,837 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:20,841 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af35390>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:20,848 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:21,852 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe67004ee10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:21,857 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:22,861 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ae84250>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:22,865 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:23,870 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aa203d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:23,875 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:24,881 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1e410>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:24,886 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:30,895 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:46:30,899 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:31,903 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a0d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:31,907 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:32,911 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad1a890>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:32,915 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:33,920 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb3690>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:33,923 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:34,927 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af35110>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:34,931 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:35,936 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ae84cd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:35,942 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:36,951 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af1bcd0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:36,955 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:37,959 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66acb3750>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:37,964 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:38,968 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af575d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:38,972 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:39,976 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af35650>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:39,980 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:40,984 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ad36b10>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:40,988 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:41,993 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66af57590>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:41,996 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:43,001 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66ac141d0>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:43,006 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:44,009 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ConnectionError(MaxRetryError("HTTPConnectionPool(host='192.168.56.10', port=8000): Max retries exceeded with url: /status (Caused by NewConnectionError('<requests.packages.urllib3.connection.HTTPConnection object at 0x7fe66aef7890>: Failed to establish a new connection: [Errno 111] Connection refused',))",),)) 2017-07-12 08:46:44,013 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:50,020 [cuckoo.core.guest] INFO: Virtual Machine /status failed (ReadTimeout(ReadTimeoutError("HTTPConnectionPool(host='192.168.56.10', port=8000): Read timed out. (read timeout=5)",),)) 2017-07-12 08:46:50,024 [cuckoo.core.guest] DEBUG: windowsxp: analysis still processing 2017-07-12 08:46:51,025 [cuckoo.core.scheduler] ERROR: Error from the Cuckoo Guest: The analysis hit the critical timeout, terminating. 2017-07-12 08:46:51,084 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2017-07-12 08:47:02,154 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label windowsxp to path /home/labs/.cuckoo/storage/analyses/5/memory.dmp 2017-07-12 08:47:02,156 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm windowsxp 2017-07-12 08:47:05,663 [cuckoo.core.scheduler] DEBUG: Released database task #5 2017-07-12 08:47:05,720 [cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,722 [cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,728 [cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,729 [cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,732 [cuckoo.core.plugins] DEBUG: Executed processing module "MetaInfo" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,733 [cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:05,734 [cuckoo.core.plugins] DEBUG: Executed processing module "Procmon" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:06,431 [cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,159 [cuckoo.core.plugins] DEBUG: Executed processing module "Static" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,316 [cuckoo.core.plugins] DEBUG: Executed processing module "Strings" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,326 [cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,476 [cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,477 [cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,521 [cuckoo.core.plugins] DEBUG: Executed processing module "Debug" on analysis at "/home/labs/.cuckoo/storage/analyses/5" 2017-07-12 08:47:19,522 [cuckoo.core.plugins] DEBUG: Running 0 signatures 2017-07-12 08:47:19,531 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump" 2017-07-12 08:47:19,711 [cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB" 2017-07-12 08:47:19,711 [cuckoo.core.scheduler] INFO: Task #5: reports generation completed (path=/home/labs/.cuckoo/s