search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.56k stars 1.71k forks source link

[cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity #2861

Open warezers opened 5 years ago

warezers commented 5 years ago
My issue is:

new beginner of cuckoo sandbox I installed cuckoo sandbox of the documentation and configuration correctly when I upload the file and scan, then cuckoo receives an error and does not scan correctly

My Cuckoo version and operating system are:

operating system: Ubuntu 18.04 (Kernal version: 5.0.0-27-generic x86_64 x86_64 x86_64 GNU/Linux) cuckoo version: 2.0.7

The log, error, files etc can be found at:

//\ //\//\ //\ //\//\ //\ /_/\ \:::\/ \:\ \:\ \:::\/ \::.\ \ \ \::: \ \::: \ \ \:\ \ \:\ \:\ \:\ \ _\:: \/) \ \:\ \ \ \:\ \ \ \ \:\ \//\:\ \:\ \:\ \//\:. ( ( \:\ \ \ \:\ \ \ \ \:_\ \ \:_\:\ \:_\ \ \: \ ) \ \ \:_\ \ \:_\ \ \ _\/ _\/ _\/ _\/_\/ _\/ _____\/

Cuckoo Sandbox 2.0.7 www.cuckoosandbox.org Copyright (c) 2010-2018

2019-09-07 17:17:23,987 [cuckoo] DEBUG: Increasing resource limit for number of open files to 4096 2019-09-07 17:17:23,987 [cuckoo] ERROR: The maximum number of open files is low (4096). If you do not increase it, you may run into errors later on. 2019-09-07 17:17:23,987 [cuckoo] ERROR: See also: https://cuckoo.sh/docs/faq/index.html#ioerror-errno-24-too-many-open-files Checking for updates... You're good to go!

Our latest blogposts:

2019-09-07 17:17:26,575 [cuckoo.core.database] DEBUG: Using database-wide lock for sqlite 2019-09-07 17:17:26,766 [cuckoo.core.startup] DEBUG: Imported modules... 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: Imported "auxiliary" modules: 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: |-- MITM 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: |-- Reboot 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: |-- Replay 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: |-- Services 2019-09-07 17:17:26,775 [cuckoo.core.startup] DEBUG: -- Sniffer 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: Imported "machinery" modules: 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- vSphere 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- KVM 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- ESX 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- XenServer 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- VirtualBox 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- Avd 2019-09-07 17:17:26,776 [cuckoo.core.startup] DEBUG: |-- QEMU 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: |-- VMware 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG:-- Physical 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: Imported "processing" modules: 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: |-- AnalysisInfo 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: |-- ApkInfo 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: |-- Baseline 2019-09-07 17:17:26,777 [cuckoo.core.startup] DEBUG: |-- BehaviorAnalysis 2019-09-07 17:17:26,778 [cuckoo.core.startup] DEBUG: |-- Debug 2019-09-07 17:17:26,778 [cuckoo.core.startup] DEBUG: |-- Droidmon 2019-09-07 17:17:26,778 [cuckoo.core.startup] DEBUG: |-- Dropped 2019-09-07 17:17:26,778 [cuckoo.core.startup] DEBUG: |-- DroppedBuffer 2019-09-07 17:17:26,778 [cuckoo.core.startup] DEBUG: |-- Extracted 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- GooglePlay 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- Irma 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- Memory 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- MetaInfo 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- MISP 2019-09-07 17:17:26,779 [cuckoo.core.startup] DEBUG: |-- NetworkAnalysis 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- ProcessMemory 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- Procmon 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- Screenshots 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- Snort 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- Static 2019-09-07 17:17:26,780 [cuckoo.core.startup] DEBUG: |-- Strings 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: |-- Suricata 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: |-- TargetInfo 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: |-- TLSMasterSecrets 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: -- VirusTotal 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: Imported "signatures" modules: 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG:-- SystemMetrics 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: Imported "reporting" modules: 2019-09-07 17:17:26,781 [cuckoo.core.startup] DEBUG: |-- ElasticSearch 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- Feedback 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- JsonDump 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- Mattermost 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- MISP 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- Moloch 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- MongoDB 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: |-- Notification 2019-09-07 17:17:26,782 [cuckoo.core.startup] DEBUG: `-- SingleFile 2019-09-07 17:17:26,807 [cuckoo.core.startup] DEBUG: Checking for locked tasks.. 2019-09-07 17:17:26,823 [cuckoo.core.startup] DEBUG: Checking for pending service tasks.. 2019-09-07 17:17:26,865 [cuckoo.core.startup] DEBUG: Initializing Yara... 2019-09-07 17:17:26,868 [cuckoo.core.startup] DEBUG: |-- binaries embedded.yar 2019-09-07 17:17:26,868 [cuckoo.core.startup] DEBUG: |-- binaries shellcodes.yar 2019-09-07 17:17:26,868 [cuckoo.core.startup] DEBUG: |-- binaries vmdetect.yar 2019-09-07 17:17:26,873 [cuckoo] WARNING: It appears that you haven't loaded any Cuckoo Signatures. Signatures are highly recommended and improve & enrich the information extracted during an analysis. They also make up for the analysis score that you see in the Web Interface - so, pretty important! 2019-09-07 17:17:26,873 [cuckoo] WARNING: You'll be able to fetch all the latest Cuckoo Signatures, Yara rules, and more goodies by running the following command: 2019-09-07 17:17:26,873 [cuckoo] INFO: $ cuckoo community 2019-09-07 17:17:26,875 [cuckoo.core.scheduler] INFO: Using "virtualbox" as machine manager 2019-09-07 17:17:27,375 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm cuckoo1 2019-09-07 17:17:27,628 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine cuckoo1 to Snapshot6 2019-09-07 17:17:28,032 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s 2019-09-07 17:17:28,048 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks. 2019-09-07 17:18:32,675 [cuckoo.core.scheduler] DEBUG: Processing task #11 2019-09-07 17:18:32,682 [cuckoo.core.scheduler] INFO: Starting analysis of FILE "2go_exe_02" (task #11, options "procmemdump=yes,route=none") 2019-09-07 17:18:32,801 [cuckoo.core.scheduler] INFO: Task #11: acquired machine cuckoo1 (label=cuckoo1) 2019-09-07 17:18:32,802 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.56.3 for task #11 2019-09-07 17:18:32,803 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Replay 2019-09-07 17:18:32,826 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 3703 (interface=vboxnet1, host=192.168.56.3) 2019-09-07 17:18:32,827 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Sniffer 2019-09-07 17:18:32,923 [cuckoo.machinery.virtualbox] DEBUG: Starting vm cuckoo1 2019-09-07 17:18:33,098 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine cuckoo1 to Snapshot6 2019-09-07 17:18:38,480 [cuckoo.core.guest] INFO: Starting analysis #11 on guest (id=cuckoo1, ip=192.168.56.3) 2019-09-07 17:18:39,484 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2019-09-07 17:18:40,492 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2019-09-07 17:18:41,496 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2019-09-07 17:18:58,325 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=cuckoo1, ip=192.168.56.3) 2019-09-07 17:19:32,060 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=cuckoo1, ip=192.168.56.3, monitor=latest, size=1720485) 2019-09-07 17:20:40,073 [cuckoo.core.resultserver] DEBUG: Task #11: live log analysis.log initialized. 2019-09-07 17:20:41,947 [cuckoo.core.resultserver] DEBUG: Task #11 is sending a BSON stream 2019-09-07 17:20:42,193 [cuckoo.core.resultserver] DEBUG: Task #11 is sending a BSON stream 2019-09-07 17:20:43,926 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0001.jpg' 2019-09-07 17:20:43,937 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127247 2019-09-07 17:20:44,082 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'memory/3724-1.dmp' 2019-09-07 17:20:44,161 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 35951704 2019-09-07 17:20:44,960 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0002.jpg' 2019-09-07 17:20:44,975 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127501 2019-09-07 17:20:59,227 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0003.jpg' 2019-09-07 17:20:59,243 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127880 2019-09-07 17:21:00,272 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0004.jpg' 2019-09-07 17:21:00,286 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127538 2019-09-07 17:21:02,527 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:03,348 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0005.jpg' 2019-09-07 17:21:03,362 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127796 2019-09-07 17:21:04,380 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0006.jpg' 2019-09-07 17:21:04,395 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127540 2019-09-07 17:21:08,539 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:12,535 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0007.jpg' 2019-09-07 17:21:12,550 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127740 2019-09-07 17:21:13,568 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0008.jpg' 2019-09-07 17:21:13,584 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127495 2019-09-07 17:21:14,555 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:20,571 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:26,587 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:26,593 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:21:32,603 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:38,622 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:40,005 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0009.jpg' 2019-09-07 17:21:40,024 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127826 2019-09-07 17:21:41,052 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0010.jpg' 2019-09-07 17:21:41,076 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127495 2019-09-07 17:21:44,632 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:45,149 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0011.jpg' 2019-09-07 17:21:45,165 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127826 2019-09-07 17:21:45,642 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:46,200 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0012.jpg' 2019-09-07 17:21:46,220 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127495 2019-09-07 17:21:46,654 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:46,659 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:21:47,665 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:48,257 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0013.jpg' 2019-09-07 17:21:48,273 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127871 2019-09-07 17:21:49,303 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0014.jpg' 2019-09-07 17:21:49,318 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127540 2019-09-07 17:21:53,683 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:21:54,695 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:55,704 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:56,716 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:56,721 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:21:57,726 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:58,737 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:21:59,748 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:00,759 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:01,769 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:01,776 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:02,783 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:03,794 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:09,812 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:22:10,824 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:11,836 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:11,842 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:12,848 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:13,860 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:14,872 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:15,881 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:16,892 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:16,896 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:17,902 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:18,908 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:19,916 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:20,922 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:26,935 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:22:26,938 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:27,940 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:28,946 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:29,955 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:30,966 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:31,977 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:31,984 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:32,990 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:34,001 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:35,011 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:36,019 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:37,032 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:37,036 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:38,041 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:44,055 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:22:45,065 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:46,072 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:47,078 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:47,080 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:48,083 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:49,090 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:50,100 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:51,110 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:52,120 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:52,126 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:22:53,131 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:54,140 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:22:55,148 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:01,159 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:23:02,167 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:02,174 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:03,176 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:04,186 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:05,195 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:06,206 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:07,217 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:07,223 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:08,229 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:09,240 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:10,250 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:11,261 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:17,271 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:23:17,278 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:18,285 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:19,297 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:20,308 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:21,319 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:22,328 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:22,335 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:23,341 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:24,353 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:25,365 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:26,377 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:27,387 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:27,391 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:28,397 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:33,976 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0015.jpg' 2019-09-07 17:23:33,999 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127830 2019-09-07 17:23:34,414 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:23:35,026 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0016.jpg' 2019-09-07 17:23:35,046 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127510 2019-09-07 17:23:35,427 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:36,439 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:37,448 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:37,450 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:38,456 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:39,468 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:40,479 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:41,491 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:42,503 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:42,508 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:43,515 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:44,526 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:45,538 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:49,288 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0017.jpg' 2019-09-07 17:23:49,309 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127877 2019-09-07 17:23:50,334 [cuckoo.core.resultserver] DEBUG: Task #11: File upload for 'shots/0018.jpg' 2019-09-07 17:23:50,348 [cuckoo.core.resultserver] DEBUG: Task #11 uploaded file length: 127570 2019-09-07 17:23:51,551 [cuckoo.core.guest] ERROR: Virtual machine /status failed. HTTPConnectionPool(host='192.168.56.3', port=8000): Read timed out. (read timeout=5) 2019-09-07 17:23:52,561 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:52,566 [cuckoo.core.guest] DEBUG: cuckoo1: analysis #11 still processing 2019-09-07 17:23:53,572 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:54,580 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:55,592 [cuckoo.core.guest] WARNING: Virtual Machine /status failed. This can indicate the guest losing network connectivity 2019-09-07 17:23:56,599 [cuckoo.core.guest] INFO: cuckoo1: end of analysis reached! 2019-09-07 17:23:56,682 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Replay 2019-09-07 17:23:56,728 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2019-09-07 17:23:56,729 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm cuckoo1 2019-09-07 17:23:58,209 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.56.3 for task #11 2019-09-07 17:23:58,210 [cuckoo.core.resultserver] DEBUG: Cancel for task 11 2019-09-07 17:23:58,211 [cuckoo.core.resultserver] DEBUG: Cancel for task 11 2019-09-07 17:23:58,212 [cuckoo.core.resultserver] DEBUG: Cancel for task 11 2019-09-07 17:23:58,289 [cuckoo.core.scheduler] DEBUG: Released database task #11 2019-09-07 17:23:58,409 [cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" for task #11 2019-09-07 17:23:58,497 [cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" for task #11 2019-09-07 17:23:58,499 [cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" for task #11 2019-09-07 17:23:58,500 [cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" for task #11 2019-09-07 17:23:58,984 [cuckoo.core.plugins] DEBUG: Executed processing module "MetaInfo" for task #11 2019-09-07 17:23:59,232 [cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" for task #11 2019-09-07 17:23:59,233 [cuckoo.core.plugins] DEBUG: Executed processing module "Procmon" for task #11 2019-09-07 17:23:59,401 [cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" for task #11 2019-09-07 17:23:59,752 [cuckoo.core.plugins] DEBUG: Executed processing module "Static" for task #11 2019-09-07 17:23:59,770 [cuckoo.core.plugins] DEBUG: Executed processing module "Strings" for task #11 2019-09-07 17:23:59,771 [cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" for task #11 2019-09-07 17:23:59,850 [cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" for task #11 2019-09-07 17:23:59,851 [cuckoo.core.plugins] DEBUG: Executed processing module "Extracted" for task #11 2019-09-07 17:23:59,851 [cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" for task #11 2019-09-07 17:23:59,853 [cuckoo.core.plugins] DEBUG: Executed processing module "Debug" for task #11 2019-09-07 17:23:59,853 [cuckoo.core.plugins] DEBUG: Running 0 signatures 2019-09-07 17:23:59,895 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump" 2019-09-07 17:24:00,310 [cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB" 2019-09-07 17:24:00,311 [cuckoo.core.scheduler] INFO: Task #11: reports generation completed 2019-09-07 17:24:00,316 [cuckoo.core.scheduler] INFO: Task #11: analysis procedure completed

doomedraven commented 5 years ago

i think this kinda crashing it, did you modify some code? from what i see you using qemu as machinery no?

2019-09-07 23:33:24,785 [cuckoo.core.scheduler] ERROR: Error in analysis manager cleanup: 'AnalysisManager' object has no attribute 'aux'
Traceback (most recent call last):
File "/usr/local/lib/python2.7/dist-packages/cuckoo/core/scheduler.py", line 961, in _cleanup_managers
am.cleanup()
File "/usr/local/lib/python2.7/dist-packages/cuckoo/core/scheduler.py", line 820, in cleanup
self.aux.stop()
AttributeError: 'AnalysisManager' object has no attribute 'aux'
warezers commented 5 years ago

@doomedraven no, I didn't modify any code and updated my error code

doomedraven commented 5 years ago

what is your target platform? windows/linux/android/mac? which hypervisor?

doomedraven commented 5 years ago

as i see, NFO: Using "virtualbox" as machine manager, and exe, well basically this is first time i see this issue

warezers commented 5 years ago

@doomedraven my vm operating system using win7

doomedraven commented 5 years ago

the os, hypervisor etc is fine, so i suspect there should be some wrong config option, but im not sure is first time i see it

warezers commented 5 years ago

Is the virtual.config section for this problem?

doomedraven commented 5 years ago

im not sure, check which options you have modified/removed, in them should be the problem

taisuke571 commented 5 years ago

same problem. Need help!and i get nothing when i try to curl http://ip:port/ .

doomedraven commented 5 years ago

if you got nothing then agent isn't running inside

Cyopeng commented 5 years ago

I had this error for a long time. I fixed it because I had the wrong adapter in the command for IP tables. Make sure your IP tables command to allow port forwarding are correct or that you did not restart your host (these commands are lost on host restart). Also make sure that the Agent.py is running in the snapshot.