cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

Cuckoo Rest API+temp_file_name+wrong score #2601

Closed sabyasachisamanta closed 5 years ago

sabyasachisamanta commented 5 years ago

Thanks for creating an issue! But first: did you read our community guidelines? https://cuckoo.sh/docs/introduction/community.html

My issue is: When i try to submit files through REST API, my files are getting submitted. But when my check in the pending tasks list, it shows the file names for all files as "temp_file_name". Also the analysis score for all files shows as 5.2 which was the score of a older scanned file.

If i manually submit the same files i get correct files names and scores in the analysis results.

My Cuckoo version and operating system are:

OS: Ubuntu 17.10 Cuckoo Sandbox 2.0.6

This can be reproduced by:
The log, error, files etc can be found at:

Analyzer log


2019-01-13 20:50:55,069 [analyzer] DEBUG: Starting analyzer from: C:\tmp3kc4ke 2019-01-13 20:50:55,069 [analyzer] DEBUG: Pipe server name: \??\PIPE\WgNsyfhbyJXouxGiKQ 2019-01-13 20:50:55,079 [analyzer] DEBUG: Log pipe server name: \??\PIPE\jPftSIzetqhxzaUhFq 2019-01-13 20:50:55,079 [analyzer] DEBUG: No analysis package specified, trying to detect it automagically. 2019-01-13 20:50:55,089 [analyzer] INFO: Automatically selected analysis package "generic" 2019-01-13 20:50:56,411 [analyzer] DEBUG: Started auxiliary module DbgView 2019-01-14 08:51:14,940 [analyzer] DEBUG: Started auxiliary module Disguise 2019-01-14 08:51:15,230 [analyzer] DEBUG: Loaded monitor into process with pid 492 2019-01-14 08:51:15,260 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets 2019-01-14 08:51:15,270 [analyzer] DEBUG: Started auxiliary module Human 2019-01-14 08:51:15,270 [analyzer] DEBUG: Started auxiliary module InstallCertificate 2019-01-14 08:51:15,270 [analyzer] DEBUG: Started auxiliary module Reboot 2019-01-14 08:51:15,471 [analyzer] DEBUG: Started auxiliary module RecentFiles 2019-01-14 08:51:15,482 [analyzer] DEBUG: Started auxiliary module Screenshots 2019-01-14 08:51:15,482 [analyzer] DEBUG: Started auxiliary module LoadZer0m0n 2019-01-14 08:51:16,022 [lib.api.process] INFO: Successfully executed process from path 'C:\Windows\System32\cmd.exe' with arguments ['/c', 'start', '/wait', '"VpGOlJ"', u'C:\Users\cuckoo\AppData\Local\Temp\temp_file_name'] and pid 4088 2019-01-14 08:51:16,413 [analyzer] DEBUG: Loaded monitor into process with pid 4088 2019-01-14 08:51:24,394 [analyzer] INFO: Injected into process with pid 2496 and name u'rundll32.exe' 2019-01-14 08:51:24,684 [lib.api.process] INFO: Memory dump of process with pid 2496 completed 2019-01-14 08:51:25,196 [analyzer] DEBUG: Loaded monitor into process with pid 2496 2019-01-14 08:51:37,592 [modules.auxiliary.human] INFO: Found button u'&Always use the selected program to open this kind of file', clicking it 2019-01-14 08:51:38,625 [modules.auxiliary.human] INFO: Found button u'&Always use the selected program to open this kind of file', clicking it 2019-01-14 08:51:39,635 [modules.auxiliary.human] INFO: Found button u'OK', clicking it 2019-01-14 08:51:46,246 [analyzer] INFO: Injected into process with pid 3136 and name u'AcroRd32.exe' 2019-01-14 08:51:47,648 [analyzer] DEBUG: Loaded monitor into process with pid 3136 2019-01-14 08:51:53,145 [analyzer] INFO: Injected into process with pid 2716 and name u'AcroRd32.exe' 2019-01-14 08:51:53,276 [analyzer] INFO: Process with pid 4088 has terminated 2019-01-14 08:51:53,766 [lib.api.process] INFO: Memory dump of process with pid 2716 completed 2019-01-14 08:51:54,276 [analyzer] INFO: Process with pid 2496 has terminated 2019-01-14 08:53:16,466 [analyzer] INFO: Analysis timeout hit, terminating analysis. 2019-01-14 08:53:16,466 [analyzer] INFO: Analysis completed.


Cuckoo Log


2019-01-13 20:50:56,292 [cuckoo.core.scheduler] INFO: Task #135: acquired machine Win7Prof32bit (label=Win7Prof32bit) 2019-01-13 20:50:56,292 [cuckoo.auxiliary.mitm] ERROR: Mitmdump does not exist at path "/usr/local/bin/mitmdump", man in the middle interception aborted. 2019-01-13 20:50:56,292 [cuckoo.core.plugins] DEBUG: Started auxiliary module: MITM 2019-01-13 20:50:56,306 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 40289 (interface=vboxnet0, host=192.168.56.101) 2019-01-13 20:50:56,307 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Sniffer 2019-01-13 20:50:56,332 [cuckoo.machinery.virtualbox] DEBUG: Starting vm Win7Prof32bit 2019-01-13 20:50:56,420 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine Win7Prof32bit to snapshot1 2019-01-13 20:50:58,859 [cuckoo.core.guest] INFO: Starting analysis on guest (id=Win7Prof32bit, ip=192.168.56.101) 2019-01-13 20:50:59,863 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:00,866 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:01,870 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:02,873 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:03,876 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:04,879 [cuckoo.core.guest] DEBUG: Win7Prof32bit: not ready yet 2019-01-13 20:51:04,892 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.8 (id=Win7Prof32bit, ip=192.168.56.101) 2019-01-13 20:51:04,910 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=Win7Prof32bit, ip=192.168.56.101, monitor=latest, size=3852382) 2019-01-13 20:51:05,642 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:06,655 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:07,362 [cuckoo.core.resultserver] DEBUG: LogHandler for live analysis.log initialized. 2019-01-13 20:51:07,663 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:08,670 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:09,678 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:10,686 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:11,694 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:12,703 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:13,712 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:14,729 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:15,778 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:16,278 [cuckoo.core.resultserver] DEBUG: New process (pid=4088, ppid=4056, name=cmd.exe) 2019-01-13 20:51:16,787 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:17,038 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0001.jpg 2019-01-13 20:51:17,047 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 50252 2019-01-13 20:51:17,797 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:18,803 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:19,810 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:20,818 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:21,824 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:22,832 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:23,841 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:24,620 [cuckoo.core.resultserver] DEBUG: File upload request for memory/2496-1.dmp 2019-01-13 20:51:24,674 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 1733136 2019-01-13 20:51:24,854 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:24,931 [cuckoo.core.resultserver] DEBUG: New process (pid=2496, ppid=4088, name=rundll32.exe) 2019-01-13 20:51:25,129 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0002.jpg 2019-01-13 20:51:25,138 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 50253 2019-01-13 20:51:25,861 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:26,302 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0003.jpg 2019-01-13 20:51:26,309 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 50213 2019-01-13 20:51:26,867 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:27,874 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:28,881 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:29,892 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:30,899 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:31,906 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:32,913 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:33,920 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:34,927 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:35,933 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:36,941 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:37,655 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0004.jpg 2019-01-13 20:51:37,669 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 52389 2019-01-13 20:51:37,948 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:38,747 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0005.jpg 2019-01-13 20:51:38,758 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 54955 2019-01-13 20:51:38,956 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:39,851 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0006.jpg 2019-01-13 20:51:39,867 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 76171 2019-01-13 20:51:39,964 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:40,974 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:41,980 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:42,986 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:43,993 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:45,000 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:46,007 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:46,912 [cuckoo.core.resultserver] DEBUG: New process (pid=3136, ppid=2496, name=AcroRd32.exe) 2019-01-13 20:51:47,014 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:47,781 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0007.jpg 2019-01-13 20:51:47,795 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 76198 2019-01-13 20:51:48,022 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:49,033 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:49,126 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0008.jpg 2019-01-13 20:51:49,139 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 76170 2019-01-13 20:51:50,100 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:50,386 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0009.jpg 2019-01-13 20:51:50,393 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 50879 2019-01-13 20:51:51,107 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:51,646 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0010.jpg 2019-01-13 20:51:51,655 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 50227 2019-01-13 20:51:52,114 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:53,126 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:53,695 [cuckoo.core.resultserver] DEBUG: File upload request for memory/2716-1.dmp 2019-01-13 20:51:53,769 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 3199624 2019-01-13 20:51:53,963 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0011.jpg 2019-01-13 20:51:53,981 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 106521 2019-01-13 20:51:54,132 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:55,123 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0012.jpg 2019-01-13 20:51:55,148 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 115472 2019-01-13 20:51:55,149 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:56,156 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:57,162 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:58,169 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:51:59,178 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:00,188 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:01,195 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:02,204 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:03,211 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:04,221 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:05,228 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:06,191 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0013.jpg 2019-01-13 20:52:06,209 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 117987 2019-01-13 20:52:06,235 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:07,242 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:08,249 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:09,255 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:10,262 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:11,270 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:12,277 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:13,283 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:14,291 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:15,297 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:16,305 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:17,312 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:18,321 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:19,328 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:20,336 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:21,343 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:22,349 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:23,356 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:24,362 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:25,368 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:26,375 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:27,382 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:28,388 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:29,395 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:30,402 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:31,408 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:32,414 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:33,420 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:34,427 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:35,434 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:36,440 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:37,446 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:38,453 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:39,459 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:40,465 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:41,472 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:42,479 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:43,484 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:44,491 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:45,497 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:46,506 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:47,512 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:48,520 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:49,526 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:50,533 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:51,539 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:52,547 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:53,553 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:54,560 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:55,566 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:56,573 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:57,579 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:58,585 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:52:59,592 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:00,599 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:01,605 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:02,614 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:03,623 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:04,629 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:05,636 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:06,643 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:07,650 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:08,657 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:09,664 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:10,671 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:11,679 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:12,685 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:13,692 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:14,700 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:15,709 [cuckoo.core.guest] DEBUG: Win7Prof32bit: analysis still processing 2019-01-13 20:53:16,715 [cuckoo.core.guest] INFO: Win7Prof32bit: analysis completed successfully 2019-01-13 20:53:16,721 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: MITM 2019-01-13 20:53:16,759 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2019-01-13 20:53:25,290 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label Win7Prof32bit to path /home/cuckoo/.cuckoo/storage/analyses/135/memory.dmp 2019-01-13 20:53:25,290 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm Win7Prof32bit 2019-01-13 20:53:25,853 [cuckoo.core.resultserver] DEBUG: File upload request for shots/0014.jpg 2019-01-13 20:53:26,004 [cuckoo.core.resultserver] DEBUG: Uploaded file length: 111266 2019-01-13 20:53:28,679 [cuckoo.core.scheduler] DEBUG: Released database task #135 2019-01-13 20:53:28,851 [cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" for task #135 2019-01-13 20:53:29,330 [cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" for task #135 2019-01-13 20:53:29,330 [cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" for task #135 2019-01-13 20:53:29,333 [cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" for task #135 2019-01-13 20:53:29,397 [cuckoo.core.plugins] DEBUG: Executed processing module "MetaInfo" for task #135 2019-01-13 20:53:29,502 [cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" for task #135 2019-01-13 20:53:29,502 [cuckoo.core.plugins] DEBUG: Executed processing module "Procmon" for task #135 2019-01-13 20:53:29,636 [cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" for task #135 2019-01-13 20:53:29,640 [cuckoo.core.plugins] DEBUG: Executed processing module "Static" for task #135 2019-01-13 20:53:29,640 [cuckoo.core.plugins] DEBUG: Executed processing module "Strings" for task #135 2019-01-13 20:53:29,643 [cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" for task #135 2019-01-13 20:53:39,664 [cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" for task #135 2019-01-13 20:53:39,664 [cuckoo.core.plugins] DEBUG: Executed processing module "Extracted" for task #135 2019-01-13 20:53:39,664 [cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" for task #135 2019-01-13 20:53:39,667 [cuckoo.core.plugins] DEBUG: Executed processing module "Debug" for task #135 2019-01-13 20:53:39,669 [cuckoo.core.plugins] DEBUG: Running 530 signatures 2019-01-13 20:53:42,895 [cuckoo.core.plugins] DEBUG: Analysis matched signature: dumped_buffer 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: allocates_rwx 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: checks_debugger 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: injection_modifies_memory 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: injection_runpe 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: injection_write_memory 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: infostealer_mail 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: antivm_memory_available 2019-01-13 20:53:42,896 [cuckoo.core.plugins] DEBUG: Analysis matched signature: antivm_memory_available 2019-01-13 20:53:42,897 [cuckoo.core.plugins] DEBUG: Analysis matched signature: process_martian 2019-01-13 20:53:42,897 [cuckoo.core.plugins] DEBUG: Analysis matched signature: memdump_urls 2019-01-13 20:53:45,092 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump"


sabyasachisamanta commented 5 years ago

Closing the issue as there are coding glitch at my side.