cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.56k stars 1.71k forks source link

Analysis results folder does not contain any behavior log files & The reporting module "Notification" returned the following error: Failed posting message via Notification: Invalid URL 'None': No schema supplied. Perhaps you meant http://None? #3162

Open yms1789 opened 3 years ago

yms1789 commented 3 years ago

Thanks for creating an issue! But first: did you read our community guidelines? https://cuckoo.sh/docs/introduction/community.html

My issue is:

2021-01-18 16:33:28,437 [cuckoo.core.plugins] WARNING: The reporting module "Notification" returned the following error: Failed posting message via Notification: Invalid URL 'None': No schema supplied. Perhaps you meant http://None?

2021-01-18 16:33:27,628 [cuckoo.processing.behavior] WARNING: Analysis results folder does not contain any behavior log files.

My Cuckoo version and operating system are:

version : 2.0.7 , operating system : HOST = Win 10 x64 , GUEST = win 7 x86

This can be reproduced by:
The log, error, files etc can be found at:

2021-01-18 16:32:27,874 [cuckoo.core.scheduler] INFO: Using "virtualbox" as machine manager 2021-01-18 16:32:28,046 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine TEST to ready 2021-01-18 16:32:28,108 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s 2021-01-18 16:32:28,124 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks. 2021-01-18 16:33:09,104 [cuckoo.core.scheduler] DEBUG: Processing task #42 2021-01-18 16:33:09,108 [cuckoo.core.scheduler] INFO: Starting analysis of FILE "005051028cd70b06d41a9703a87b07dfd779d03395073edf6d43aaa10a719040.exe" (task #42, options "procmemdump=yes,route=none") 2021-01-18 16:33:09,154 [cuckoo.core.scheduler] INFO: Task #42: acquired machine cuckoo1 (label=TEST) 2021-01-18 16:33:09,154 [cuckoo.core.resultserver] DEBUG: Now tracking machine 192.168.56.100 for task #42 2021-01-18 16:33:09,154 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Replay 2021-01-18 16:33:09,154 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 11508 (interface=\Device\NPF_{30FC3334-4538-4968-9AD2-BE34955A884E}, host=192.168.56.100) 2021-01-18 16:33:09,154 [cuckoo.core.plugins] DEBUG: Started auxiliary module: Sniffer 2021-01-18 16:33:09,186 [cuckoo.machinery.virtualbox] DEBUG: Starting vm TEST 2021-01-18 16:33:09,249 [cuckoo.machinery.virtualbox] DEBUG: Restoring virtual machine TEST to ready 2021-01-18 16:33:18,657 [cuckoo.core.guest] INFO: Starting analysis #42 on guest (id=cuckoo1, ip=192.168.56.100) 2021-01-18 16:33:19,661 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2021-01-18 16:33:20,665 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2021-01-18 16:33:21,671 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2021-01-18 16:33:22,677 [cuckoo.core.guest] DEBUG: cuckoo1: not ready yet 2021-01-18 16:33:22,704 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.10 (id=cuckoo1, ip=192.168.56.100) 2021-01-18 16:33:22,753 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=cuckoo1, ip=192.168.56.100, monitor=latest, size=3823611) 2021-01-18 16:33:23,459 [cuckoo.core.resultserver] DEBUG: Task #42: live log analysis.log initialized. 2021-01-18 16:33:26,400 [cuckoo.core.guest] WARNING: cuckoo1: analysis #42 caught an exception Traceback (most recent call last): File "C:/tmp6gysrf/analyzer.py", line 808, in success = analyzer.run() File "C:/tmp6gysrf/analyzer.py", line 657, in run pids = self.package.start(self.target) File "C:\tmp6gysrf\modules\packages\exe.py", line 23, in start return self.execute(path, args=shlex.split(args)) File "C:\tmp6gysrf\lib\common\abstracts.py", line 164, in execute maximize=maximize, env=env, trigger=trigger): File "C:\tmp6gysrf\lib\api\process.py", line 338, in execute output = subprocess_checkoutput(argv, env) File "C:\tmp6gysrf\lib\api\process.py", line 105, in subprocess_checkoutput args, stdin=subprocess.PIPE, stderr=subprocess.PIPE, env=env, File "C:\Python27\lib\subprocess.py", line 216, in check_output process = Popen(stdout=PIPE, *popenargs, **kwargs) File "C:\Python27\lib\subprocess.py", line 394, in init errread, errwrite) File "C:\Python27\lib\subprocess.py", line 644, in _execute_child startupinfo) File "C:\tmp6gysrf\lib\api\process.py", line 83, in spCreateProcessW raise WindowsError(KERNEL32.GetLastError()) WindowsError: 2

2021-01-18 16:33:26,434 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Replay 2021-01-18 16:33:26,440 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 2021-01-18 16:33:26,440 [cuckoo.machinery.virtualbox] DEBUG: Stopping vm TEST 2021-01-18 16:33:27,581 [cuckoo.core.resultserver] DEBUG: Stopped tracking machine 192.168.56.100 for task #42 2021-01-18 16:33:27,581 [cuckoo.core.resultserver] DEBUG: Cancel for task 42 2021-01-18 16:33:27,596 [cuckoo.core.scheduler] DEBUG: Released database task #42 2021-01-18 16:33:27,628 [cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" for task #42 2021-01-18 16:33:27,628 [cuckoo.processing.behavior] WARNING: Analysis results folder does not contain any behavior log files. 2021-01-18 16:33:27,628 [cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" for task #42 2021-01-18 16:33:27,628 [cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" for task #42 2021-01-18 16:33:27,628 [cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" for task #42 2021-01-18 16:33:27,644 [cuckoo.core.plugins] DEBUG: Executed processing module "MetaInfo" for task #42 2021-01-18 16:33:27,644 [cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" for task #42 2021-01-18 16:33:27,644 [cuckoo.core.plugins] DEBUG: Executed processing module "Procmon" for task #42 2021-01-18 16:33:27,644 [cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" for task #42 2021-01-18 16:33:27,956 [cuckoo.core.plugins] DEBUG: Executed processing module "Static" for task #42 2021-01-18 16:33:28,003 [cuckoo.core.plugins] DEBUG: Executed processing module "Strings" for task #42 2021-01-18 16:33:28,033 [cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" for task #42 2021-01-18 16:33:28,049 [cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" for task #42 2021-01-18 16:33:28,065 [cuckoo.core.plugins] DEBUG: Executed processing module "Extracted" for task #42 2021-01-18 16:33:28,065 [cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" for task #42 2021-01-18 16:33:28,065 [cuckoo.core.plugins] DEBUG: Executed processing module "Debug" for task #42 2021-01-18 16:33:28,081 [cuckoo.core.plugins] DEBUG: Running 542 signatures 2021-01-18 16:33:28,201 [cuckoo.core.plugins] DEBUG: Analysis matched signature: nolookup_communication 2021-01-18 16:33:28,201 [cuckoo.core.plugins] DEBUG: Analysis matched signature: packer_entropy 2021-01-18 16:33:28,201 [cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump" 2021-01-18 16:33:28,437 [cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB" 2021-01-18 16:33:28,437 [cuckoo.core.plugins] WARNING: The reporting module "Notification" returned the following error: Failed posting message via Notification: Invalid URL 'None': No schema supplied. Perhaps you meant http://None? 2021-01-18 16:33:28,437 [cuckoo.core.scheduler] INFO: Task #42: reports generation completed 2021-01-18 16:33:28,437 [cuckoo.core.scheduler] INFO: Task #42: analysis procedure completed