search

spender-sandbox / cuckoo-modified

Modified edition of cuckoo
394 stars 178 forks source link

Country Name is unknown in Cuckoo Reports #448

Open masifpak opened 7 years ago

masifpak commented 7 years ago

Country name is unknown in malware reports. What i have to do so that there is country name instead of just unknown. image

doomedraven commented 7 years ago

maybe update geo file database, search in code where it is and update with latest version

Nwinternights commented 7 years ago

https://github.com/brad-accuvant/cuckoo-modified/issues/140

masifpak commented 7 years ago

Thanks for the link. It is working but pushed me in another problem. Now analysis start taking extra ordinary time, even more than 30 minutes and every analysis end with message.

"Error: The analysis hit the critical timeout, terminating."

Now countries scanning, or i don't know what it is doing,. Below list goes to more than 400 countries.

image

Nwinternights commented 7 years ago

probably your sample is a sort of cerber that trying to connect to multiple C&C. normal behaviour. to speed up reverse lookup task take a look here https://github.com/spender-sandbox/cuckoo-modified/issues/385