cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

Remote Desktop : Have a full control #2330

Open LetMeR00t opened 6 years ago

LetMeR00t commented 6 years ago

Thanks for creating an issue! But first: did you read our community guidelines? https://cuckoo.sh/docs/introduction/community.html

My issue is:

When I take the control on the remote desktop, it's like there is a script that simulate a click on a screen (probably the script that allow to execute a file in a VM). The problem is that if I take the control, the script is continuing to click on the screen so I'm not able to perform an analysis with the full control

My Cuckoo version and operating system are: 2.0.6.1
This can be reproduced by:

Activate the remote control on an analysis and test with a URL. For exemple in this case the browser will be reduced automatically

The log, error, files etc can be found at:

No log detected for this behavior

jbremer commented 6 years ago

Disable the human module ;) isn't this done by default @automagisch?

LetMeR00t commented 6 years ago

Thank you, indeed it's better :) And obviously no, it's not done by default when I choose to active the remote desktop control.

LetMeR00t commented 6 years ago

Hi @jbremer, I've just noticed that the keyboard used in the Remote Desktop is a "qwerty". Could it be possible to customize it in order to choose an "azerty" one ? (I know, I'm a French guy ... so I use an "azerty" keyboard.

LetMeR00t commented 6 years ago

FYI, we can do "Super+Space" in the virtual machine (under Remote Desktop) to change the keyboard to Azerty.