cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.55k stars 1.71k forks source link

Cuckoo configuration Virtual Machine #2701

Open manufg opened 5 years ago

manufg commented 5 years ago

2019-03-28 14:39:52,569 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 3584 (interface=vboxnet0, host=192.168.56.101) 2019-03-28 14:41:39,485 [cuckoo.core.guest] INFO: Starting analysis on guest (id=sandbox-win7-01, ip=192.168.56.101) 2019-03-28 14:44:40,185 [cuckoo.core.scheduler] ERROR: Error from machine 'sandbox-win7-01': it appears that this Virtual Machine hasn't been configured properly as the Cuckoo Host wasn't able to connect to the Guest. There could be a few reasons for this, please refer to our documentation on the matter: https://cuckoo.sh/docs/faq/index.html#troubleshooting-vm-network-configuration 2019-03-28 14:44:43,996 [cuckoo.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label sandbox-win7-01 to path /root/.cuckoo/storage/analyses/3/memory.dmp 2019-03-28 14:44:51,428 [cuckoo.processing.behavior] WARNING: Analysis results folder does not exist at path '/root/.cuckoo/storage/analyses/3/logs'. 2019-03-28 14:44:51,541 [cuckoo.processing.memory] ERROR: VM memory dump not found: to create VM memory dumps you have to enable memory_dump in cuckoo.conf! 2019-03-28 14:46:27,831 [cuckoo.processing.debug] ERROR: Error processing task #3: it appears that the Virtual Machine hasn't been able to contact back to the Cuckoo Host. There could be a few reasons for this, please refer to our documentation on the matter: https://cuckoo.sh/docs/faq/index.html#troubleshooting-vm-network-configuration

Log is submitted above . What needs to be done?

NeKroZ commented 5 years ago

You need to have the agent.py script executing on the VM at the time (via snapshot) for proper cuckoo-vm communication

LetMeR00t commented 5 years ago

Hi, NeKroz is right. You should follow this procedure : https://cuckoo.sh/docs/installation/guest/agent.html