Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cuckoo Analysis Fails #162

Closed
rstgermain opened this issue Dec 28, 2017 · 3 comments
Closed

Cuckoo Analysis Fails #162

rstgermain opened this issue Dec 28, 2017 · 3 comments
Labels
category:bug Issue is related to a bug scope:analyzer Issue is analyzer related
Milestone

Comments

@rstgermain
Copy link

rstgermain commented Dec 28, 2017

Request Type

Bug

Work Environment

Question Answer
OS version (server) CentOS
OS version (client) Win 10, Ubuntu
TheHive version / git hash 3.0.2
Package Type RPM
Browser type & version Chrome 62.0.3202.94

Problem Description

When running a Cuckoo URL or File analysis on Cuckoo 2.0.3, I receive this error: "Unexpected Error: 'list' object has no attribute 'keys'". The URL is sent for analysis as I can see it completed within Cuckoo. However, TheHive states that the analyzer failed. Full output shown on the bottom.

Steps to Reproduce

Runthe Cuckoo URL analyzer against a URL Indicator

Complementary information

{
  "errorMessage": "Unexpected Error: 'list' object has no attribute 'keys'",
  "input": {
    "dataType": "url",
    "config": {
      "url": "http://192.168.175.154:1337",
      "max_tlp": 1,
      "check_tlp": true,
      "service": "url_analysis"
    },
    "tlp": 1,
    "data": "http://cnn.com"
  },
  "success": false
}
@3c7 3c7 added scope:analyzer Issue is analyzer related category:bug Issue is related to a bug labels Dec 28, 2017
@garanews
Copy link
Contributor

Could you try this https://github.com/LDO-CERT/Cortex-Analyzers/blob/master/analyzers/CuckooSandbox/cuckoosandbox_analyzer.py

@rstgermain
Copy link
Author

That did the trick. Thank you!

@garanews
Copy link
Contributor

good, created PR #163

@nadouani nadouani added this to the 1.8.0 milestone Jan 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug scope:analyzer Issue is analyzer related
Projects
None yet
Development

No branches or pull requests

4 participants