search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

Cuckoo Cannot Access Folder Paths #1667

Open ghost opened 7 years ago

ghost commented 7 years ago

I am getting a warning when running cuckoo. The analysis completes. I am just wondering if this is something I should be concerned about.

2017-06-18 08:10:29,957 [root] WARNING: Unable to access file at path "C:\Users\Administrator\AppData\Local\Microsoft\Outlook\Outlook.pst": [Errno 13] Permission denied 2017-06-18 08:10:29,977 [root] INFO: Analysis completed.

visaobuon commented 7 years ago

The same error.

jbremer commented 7 years ago

What kind of file(s) are you guys analyzing? Could you share either hashes or the complete analyses? Thanks!

ghost commented 7 years ago

Well Jbremer, --- the error is not occurring now. I am sure, I was getting it when I was analyzing emails (as seen above .eml / .msg). However the only thing I did differently - (I was fooling with the config) was I added the python agent.pyw to guest machine startup via a registry command, as before I just had file in the shell:startup folder.

osh2ep commented 7 years ago

I experienced the same thing, the only difference is

2017-07-12 04:16:36,691 [analyzer] INFO: Error dumping file from path "c:\users\osh2ep\appdata\local\temp\~dff9ff8978da344f4a.tmp": [Errno 13] Permission denied: u'c:\\users\\osh2ep\\appdata\\local\\temp\\~dff9ff8978da344f4a.tmp'

That file only shared permission with user "osh2ep", no Administrator but I'm running agent.py as Administrator.