mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.57k stars 918 forks source link

How to install flare-vm on Windows 7? #343

Closed ssxcxS45XT closed 3 years ago

ssxcxS45XT commented 3 years ago

I got the following error when I try to install flare-vm. Would you please let me know how to install it?

PS C:\Users\IEUser\Desktop\flare-vm> .\install.ps1
[+] No custom profile is provided...
[+] Checking if script is running as administrator..
[+] Checking to make sure Operating System is compatible
    Microsoft Windows 7 Enterprise  supported
[+] Getting user credentials ...

Windows PowerShell Credential Request
Enter your credentials.
Password for user IEUser: 

[+] Installing Boxstarter
Chocolatey is going to be downloaded and installed on your machine. If you do not have the .NET Framework Version 4 or greater, that will also be downloaded and installed.
Failed to install boxstarter. Trying again.
Chocolatey is going to be downloaded and installed on your machine. If you do not have the .NET Framework Version 4 or greater, that will also be downloaded and installed.
Failed to install boxstarter a second time.
Property 'RebootOk' cannot be found on this object; make sure it exists and is settable.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:291 char:15
+   $Boxstarter. <<<< RebootOk = $true # Allow reboots?
    + CategoryInfo          : InvalidOperation: (RebootOk:String) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

Property 'NoPassword' cannot be found on this object; make sure it exists and is settable.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:293 char:13
+ $Boxstarter. <<<< NoPassword = $false # Is this a machine with no login password?
    + CategoryInfo          : InvalidOperation: (NoPassword:String) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

Property 'AutoLogin' cannot be found on this object; make sure it exists and is settable.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:294 char:13
+ $Boxstarter. <<<< AutoLogin = $true # Save my password securely and auto-login after a reboot
    + CategoryInfo          : InvalidOperation: (AutoLogin:String) [], RuntimeException
    + FullyQualifiedErrorId : PropertyNotFound

The term 'Set-BoxstarterConfig' is not recognized as the name of a cmdlet, function, script file, or operable program. 
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:295 char:21
+ Set-BoxstarterConfig <<<<  -NugetSources "https://www.myget.org/F/fireeye/api/v2;https://chocolatey.org/api/v2"
    + CategoryInfo          : ObjectNotFound: (Set-BoxstarterConfig:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

The term 'Disable-MicrosoftUpdate' is not recognized as the name of a cmdlet, function, script file, or operable progra
m. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:298 char:24
+ Disable-MicrosoftUpdate <<<< 
    + CategoryInfo          : ObjectNotFound: (Disable-MicrosoftUpdate:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

The term 'choco' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spell
ing of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:6
+ choco <<<<  sources add -n=fireeye -s https://www.myget.org/F/fireeye/api/v2 --priority 1
    + CategoryInfo          : ObjectNotFound: (choco:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

The term 'choco' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spell
ing of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:6
+ choco <<<<  upgrade -y vcredist-all.flare
    + CategoryInfo          : ObjectNotFound: (choco:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

The term 'refreshenv' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the 
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:11
+ refreshenv <<<< 
    + CategoryInfo          : ObjectNotFound: (refreshenv:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

[+] Performing normal installation...
The term 'choco' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spell
ing of the name, or if a path was included, verify that the path is correct and try again.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:346 char:8
+   choco <<<<  upgrade -y -f common.fireeye
    + CategoryInfo          : ObjectNotFound: (choco:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

The term 'Install-BoxStarterPackage' is not recognized as the name of a cmdlet, function, script file, or operable prog
ram. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At C:\Users\IEUser\Desktop\flare-vm\install.ps1:350 char:30
+     Install-BoxStarterPackage <<<<  -PackageName flarevm.installer.flare -Credential $cred
    + CategoryInfo          : ObjectNotFound: (Install-BoxStarterPackage:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException
neriberto commented 3 years ago

I have the same error here

thebigplate commented 3 years ago

I have tested and confirmed the solution in Windows 7 is to install .NET 4.5 or higher, and install WMF 5.1 which will update Powershell. Use the following links and Flare-VM will be prepped and ready to run.

.NET 4.5 https://www.microsoft.com/en-us/download/details.aspx?id=30653 WMF 5.1 https://www.microsoft.com/en-us/download/details.aspx?id=54616_

REASON: Chocolatey now requires PowerShell v3 (or higher) and .NET 4.0 (or higher) due to recent upgrades to TLS 1.2.

htnhan commented 3 years ago

Thankyou @applewaffle.

Please install .NET 4.5 and WMF 5.1 and let us know if you still have issues installing FLARE-VM