Closed GoogleCodeExporter closed 9 years ago
have you tried running the command with the absolute path of file.apk?
Original comment by spreitze...@googlemail.com
on 27 Dec 2013 at 3:21
Issue 42 has been merged into this issue.
Original comment by spreitze...@googlemail.com
on 27 Dec 2013 at 3:24
I put the file.apk in the same folder where droidbox.sh is...
Original comment by nasaq...@gmail.com
on 27 Dec 2013 at 6:10
please try running the command with the absolute path of the sample file
e.g., ./droidbox.sh /home/user/file.apk
Original comment by spreitze...@googlemail.com
on 27 Dec 2013 at 6:16
Thanks this seems, it is trying to do something, at least I am not getting that
error now.. But no log is ever collected it just going forever 'Collected 0
log'. Do you have an sample Malware apk which you have tested it on? or any
recommendation about the type of malware.. I tried couple of apks but it is not
collecting any information.
Thanks is advance!
Original comment by nasaq...@gmail.com
on 27 Dec 2013 at 6:51
please try using the DroidBoxTest.apk from the downloads section. This one
should generate logs.
https://code.google.com/p/droidbox/downloads/detail?name=DroidBoxTests.apk
Original comment by spreitze...@googlemail.com
on 27 Dec 2013 at 7:06
Hi there,
I tried using it with the DroidBoxTest but again no log. I am using Android
emulator 4.1.2 and Droidbox4_1_1.. It shows a call on emulator screen but
collect no logs..
"enfperm": [], "recvnet": {}, "servicestart": {}, "sendsms": {}, "cryptousage": {}, "sendnet": {}, "accessedfiles": {}, "fdaccess": {}, "dataleaks": {}, "opennet": {}, "recvsaction": {".SMSReceiver": "android.provider.Telephony.SMS_RECEIVED"}, "dexclass": {}, "hashes": ["aabdfae011e3e9cfc3519520350b0641", "8c189ee0fe385769dab515a20d9eec63c608ee8c", "ee093aa086a1638edd22823ec3c806828caf40ee41f1f48367c172b516c9e070"], "closenet": {}, "phonecalls": {}}
Original comment by nasaq...@gmail.com
on 27 Dec 2013 at 8:01
are you using the RC version or did you built the DroidBox emulator images by
your own?
Original comment by spreitze...@googlemail.com
on 28 Dec 2013 at 12:21
I am using RC version DroidBox411RC.tar.gz downloaded from this website..
Original comment by nasaq...@gmail.com
on 28 Dec 2013 at 1:23
can you check the emulator you are using?
I've the following settings for the emulator:
- Device: Nexus 4
- Target: Android 4.1.2 API level 16
- CPU: ARM armeabi-v7a
after setting up the emulator, I start the system by executing ./startemu.sh
<emulator_name> and as soon as the emulator has booted, I execute ./droidbox.sh
<absolute_path_to_apk/apk>
Original comment by spreitze...@googlemail.com
on 28 Dec 2013 at 1:47
Great!! It works now.. I had the same exact setting but I was starting the
emulator some other way and NOT using ./startemu command.. But when I used it
works.. Now one final question for you. How could I get the output in graphical
way as you showed on the screen? (what is loader.apk for?)
Original comment by nasaq...@gmail.com
on 28 Dec 2013 at 8:39
Thanks a alot for all your help. I really appreciate it!!
Original comment by nasaq...@gmail.com
on 28 Dec 2013 at 8:39
You're welcome!
For the old "graphical" output please see issue 40, we are going to fix this.
Original comment by spreitze...@googlemail.com
on 28 Dec 2013 at 9:22
Ahh.. I see. So the older version support graphical output.. Can I use the
older version 4.1.1 on Android 4.1.2 emulator? if not what settings are
required for older version? Thanks again!
Original comment by nasaq...@gmail.com
on 28 Dec 2013 at 9:52
the older version is for Android 2.3.3, I will try to submit the patch within
the next week. Afterwards DroidBox 4.1.1 should have both, the old and the new
output.
Original comment by spreitze...@googlemail.com
on 29 Dec 2013 at 12:42
Alright, thanks. If possible, please update here so I would get an email
notification about the new release. Looking forward to it..
Original comment by nasaq...@gmail.com
on 29 Dec 2013 at 12:57
Is there a way to use droidbox to analyze physical android device (NOT
emulator).
Original comment by nasaq...@gmail.com
on 30 Dec 2013 at 2:33
please update new version with same result ouput with droidbox2.3.3 about
graphical,...
Original comment by dangbami...@gmail.com
on 1 Jan 2014 at 11:33
Hi, I do not see a new version.. The one I have DroidBox411RC is the latest I
can see in Downloads.
Original comment by nasaq...@gmail.com
on 1 Jan 2014 at 8:31
please have a look at issue 40 regarding the output of DroidBox 4.1.1
Original comment by spreitze...@googlemail.com
on 6 Jan 2014 at 11:42
hi
i am try to using droidbox 411 rc with configuration that mentioned in
http://code.google.com/p/droidbox/
first, i run ./startemu.sh and then run ./droidbox.sh apk file
i see output,but dont have any any file for output
that's what i see:
fariba@fariba-Lenovo-IdeaPad-Z500:~/DroidBox_4.1.1$ ./droidbox.sh
'/media/fariba/5A8A35D98A35B27D/learning/app/com.bellochat.belloapp_2.apk'
* daemon not running. starting it now on port 5037 *
* daemon started successfully *
____ __ ____
/\ _`\ __ /\ \/\ _`\
\ \ \/\ \ _ __ ___ /\_\ \_\ \ \ \L\ \ ___ __ _
\ \ \ \ \/\`'__\ __`\/\ \ /'_` \ \ _ <' / __`\/\ \/'\
\ \ \_\ \ \ \/\ \L\ \ \ \/\ \L\ \ \ \L\ \ \L\ \/> </
\ \____/\ \_\ \____/\ \_\ \___,_\ \____/ \____//\_/\_\
\/___/ \/_/\/___/ \/_/\/__,_ /\/___/ \/___/ \//\/_/
Waiting for the device...
Installing the application
/media/fariba/5A8A35D98A35B27D/learning/app/com.bellochat.belloapp_2.apk...
Running the component
com.bellochat.belloapp/com.bellochat.belloapp.SplashActivity...
Starting the activity com.bellochat.belloapp.SplashActivity...
Application started
Analyzing the application during infinite time seconds...
{"apkName":
"/media/fariba/5A8A35D98A35B27D/learning/app/com.bellochat.belloapp_2.apk",
"enfperm": [], "recvnet": {"3.5783140659332275": {"data":
"485454502f312e3120323030204f4b0d0a446174653a205765642c2032372041756720323031342
030373a35363a323420474d540d0a5365727665723a204170616368652f322e322e3232202844656
269616e290d0a582d506f77657265642d42793a20", "host": "178.79.166.9", "type":
"net read", "port": "6391"}, "55.338886976242065": {"data":
"3c3f786d6c2076657273696f6e3d27312e30273f3e3c73747265616d3a73747265616d20786d6c6
e733d276a61626265723a636c69656e742720786d6c6e733a73747265616d3d27687474703a2f2f6
574686572782e6a61626265722e6f72672f737472", "host": "178.79.166.9", "type":
"net read", "port": "5222"}, "55.488003969192505": {"data":
"3c70726f6365656420786d6c6e733d2775726e3a696574663a706172616d733a786d6c3a6e733a7
86d70702d746c73272f3e00000000000000000000000000000000000000000000000000000000000
00000000000000000000000000000000000000000", "host": "178.79.166.9", "type":
"net read", "port": "5222"}}, "servicestart": {"52.133440017700195": {"type":
"service", "name": "com.android.providers.calendar.EmptyService"},
"53.87957000732422": {"type": "service", "name":
"com.android.calendar.alerts.AlertService"}, "53.874006032943726": {"type":
"service", "name": "com.android.calendar.alerts.AlertService"},
"56.32211399078369": {"type": "service", "name":
"com.bellochat.belloapp.contact.ContactComparatorService"},
"49.349807024002075": {"type": "service", "name":
"com.android.email.service.EmailBroadcastProcessorService"},
"51.78270196914673": {"type": "service", "name":
"com.android.exchange.service.ExchangeBroadcastProcessorService"},
"49.355138063430786": {"type": "service", "name":
"com.android.email.service.EmailBroadcastProcessorService"},
"51.77605986595154": {"type": "service", "name":
"com.bellochat.belloapp.contact.ContactComparatorService"},
"51.85183501243591": {"type": "service", "name":
"com.bellochat.belloapp.xmpp.XMPPService"}, "51.77774500846863": {"type":
"service", "name":
"com.android.exchange.service.ExchangeBroadcastProcessorService"}}, "sendsms":
{}, "cryptousage": {}, "sendnet": {"3.447305917739868": {"type": "net write",
"desthost": "178.79.166.9", "fd": "18", "operation": "send", "data":
"474554202f676574636f756e74727920485454502f312e310d0a486f73743a20696d2e62656c6c6
f636861742e636f6d3a363339310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a5
57365722d4167656e743a20616e64726f69642d61", "destport": "6391"},
"55.24045205116272": {"type": "net write", "desthost": "178.79.166.9", "fd":
"39", "operation": "send", "data":
"3c73747265616d3a73747265616d20746f3d2262656c6c6f636861742e636f6d2220786d6c6e733
d226a61626265723a636c69656e742220786d6c6e733a73747265616d3d22687474703a2f2f65746
86572782e6a61626265722e6f72672f7374726561", "destport": "5222"},
"55.35112285614014": {"type": "net write", "desthost": "178.79.166.9", "fd":
"39", "operation": "send", "data":
"3c7374617274746c7320786d6c6e733d2275726e3a696574663a706172616d733a786d6c3a6e733
a786d70702d746c73222f3e", "destport": "5222"}}, "accessedfiles": {"1616350464":
"/proc/775/cmdline", "278232927": "/proc/788/cmdline", "1640630127":
"/proc/862/cmdline", "288247476":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "366014199":
"/data/data/com.android.browser/shared_prefs/com.android.browser_preferences.xml
", "1185407592":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "1753357043":
"/data/data/com.android.contacts/shared_prefs/com.android.contacts_preferences.x
ml", "2016478861":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "148480249":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "913576293": "/proc/733/cmdline", "1276529164":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "946874204":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "1519140484": "/proc/745/cmdline", "1818064546": "/proc/811/cmdline",
"770254008": "/dev/urandom", "1073330103":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "8480865":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "1298035846":
"/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences
.xml", "165406945":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml"}, "fdaccess": {"0.7748990058898926": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2262617
3655f6469726563746f7279223e2f6d6e742f7364", "id": "1073330103", "type": "file
write"}, "4.4328038692474365": {"path": "/proc/733/cmdline", "operation":
"read", "data":
"636f6d2e616e64726f69642e6d75736963667800000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "913576293", "type": "file
read"}, "23.444150924682617": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2273696
76e5f696e5f72657472795f636f756e74223e313c", "id": "946874204", "type": "file
write"}, "7.736953020095825": {"path":
"/data/data/com.android.gallery3d/shared_prefs/com.android.gallery3d_preferences
.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c696e74206e616d653d227061636b616
765732d76657273696f6e222076616c75653d2238", "id": "1298035846", "type": "file
write"}, "23.081313848495483": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2273696
76e5f696e5f72657472795f636f756e74223e313c", "id": "165406945", "type": "file
write"}, "62.66893792152405": {"path": "/proc/862/cmdline", "operation":
"read", "data":
"636f6d2e616e64726f69642e636f6e7461637473000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "1640630127", "type": "file
read"}, "50.74488306045532": {"path":
"/data/data/com.android.browser/shared_prefs/com.android.browser_preferences.xml
", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c626f6f6c65616e206e616d653d22656
e61626c655f68617264776172655f616363656c5f", "id": "366014199", "type": "file
write"}, "23.070711851119995": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2273696
76e5f696e5f72657472795f636f756e74223e313c", "id": "1185407592", "type": "file
write"}, "4.462616920471191": {"path": "/proc/788/cmdline", "operation":
"read", "data":
"6c6f676361740044726f6964426f783a570064616c76696b766d3a570041637469766974794d616
e616765723a49000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "278232927", "type": "file
read"}, "50.86883497238159": {"path": "/proc/811/cmdline", "operation": "read",
"data":
"636f6d2e616e64726f69642e62726f7773657200000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "1818064546", "type": "file
read"}, "21.5627920627594": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22636f7
56e7472795f636f6465223e39383c2f737472696e", "id": "8480865", "type": "file
write"}, "4.442430019378662": {"path": "/proc/745/cmdline", "operation":
"read", "data":
"636f6d2e73766f782e7069636f00000000000000000000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "1519140484", "type": "file
read"}, "4.45182204246521": {"path": "/proc/775/cmdline", "operation": "read",
"data":
"636f6d2e62656c6c6f636861742e62656c6c6f61707000000000000000000000000000000000000
0000000000000000000000000000000000000000000000000000000000000000000000000702f636
f6d2e62656c6c6f636861742e62656c6c6f617070", "id": "1616350464", "type": "file
read"}, "21.600165843963623": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22636f7
56e7472795f636f6465223e39383c2f737472696e", "id": "148480249", "type": "file
write"}, "55.51489591598511": {"path": "/dev/urandom", "operation": "read",
"data":
"7a4befbfbd2202efbfbdefbfbd784aefbfbdefbfbdefbfbd43efbfbdefbfbdefbfbdefbfbd7351"
, "id": "770254008", "type": "file read"}, "23.095634937286377": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2273696
76e5f696e5f72657472795f636f756e74223e313c", "id": "2016478861", "type": "file
write"}, "65.67886185646057": {"path":
"/data/data/com.android.contacts/shared_prefs/com.android.contacts_preferences.x
ml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d22436f6
e74616374456469746f725574696c735f6b6e6f77", "id": "1753357043", "type": "file
write"}, "21.619044065475464": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d226e696
36b6e616d65223e3c2f737472696e673e0a3c7374", "id": "1276529164", "type": "file
write"}, "23.43415403366089": {"path":
"/data/data/com.bellochat.belloapp/shared_prefs/com.bellochat.belloapp_preferenc
es.xml", "operation": "write", "data":
"3c3f786d6c2076657273696f6e3d27312e302720656e636f64696e673d277574662d38272073746
16e64616c6f6e653d2779657327203f3e0a3c6d61703e0a3c737472696e67206e616d653d2273696
76e5f696e5f72657472795f636f756e74223e313c", "id": "288247476", "type": "file
write"}}, "dataleaks": {}, "opennet": {"3.3333020210266113": {"desthost":
"178.79.166.9", "fd": "18", "destport": "6391"}, "21.81579089164734":
{"desthost": "178.79.166.9", "fd": "24", "destport": "6035"},
"55.03447198867798": {"desthost": "178.79.166.9", "fd": "39", "destport":
"5222"}, "45.96966505050659": {"desthost": "178.79.166.9", "fd": "34",
"destport": "6035"}}, "recvsaction":
{"com.bellochat.belloapp.xmpp.XMPPBroadcastReceiver":
"android.net.conn.CONNECTIVITY_CHANGE",
"com.bellochat.belloapp.signin.LogoutReceiver":
"com.bellochat.belloapp.signin.UserDataErrorReceiver.ACTION_LOGOUT",
"com.bellochat.belloapp.notification.NotificationReceiver":
"com.bellochat.belloapp.action.notification"}, "dexclass":
{"0.1774740219116211": {"path": "/data/app/com.bellochat.belloapp-1.apk",
"type": "dexload"}, "49.95594096183777": {"path": "/system/app/Browser.apk",
"type": "dexload"}, "60.65789198875427": {"path": "/system/app/Contacts.apk",
"type": "dexload"}}, "hashes": ["9daf9e3f42b888db8e0f4722a5519210",
"3f0cbb3ebae625d177e4f0cc434d480fdc9889bf",
"927b4006d648cf21adb9c742753134674323b2d5a35c64362be1228c98a70fbf"],
"closenet": {}, "phonecalls": {}}
Original comment by fariba.g...@gmail.com
on 27 Aug 2014 at 8:06
Original issue reported on code.google.com by
dangbami...@gmail.com
on 11 Dec 2013 at 1:16