search

spender-sandbox / cuckoo-modified

Modified edition of cuckoo
392 stars 178 forks source link

What part of cuckoo generated report is from Virustotal. #484

Open masifpak opened 6 years ago

masifpak commented 6 years ago

I have deployed Cuckoo for malware analysis. I want to understand following queries. What part of report is get from virustotal. I mean does we integrate whole virustotal report in cuckoo report or some part. Cuckoo shows Behavior Analysis and static analysis from virus total or its own.

doomedraven commented 6 years ago

become familiar with project structure will save you a lot of time https://github.com/spender-sandbox/cuckoo-modified/tree/master/modules/processing

kevoreilly commented 6 years ago

The behavioural analysis and static analysis are performed by Cuckoo. As doomedraven suggests, the code for this is in the processing subdirectory, and the VirusTotal lookups may be completely disabled by configuring the [virustotal] section of conf\processing.conf, setting enabled = no. Then what will remain will only be Cuckoo.

kevoreilly commented 6 years ago

Apologies for bumping what is such an old post - should have checked the date before replying!