{"action":"opened","issue":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2551","repository_url":"https://api.github.com/repos/cuckoosandbox/cuckoo","labels_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2551/labels{/name}","comments_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2551/comments","events_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2551/events","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/2551","id":378843108,"node_id":"MDU6SXNzdWUzNzg4NDMxMDg=","number":2551,"title":"Cuckoo doesn't execute malware","user":{"login":"Vidhu211","id":36242970,"node_id":"MDQ6VXNlcjM2MjQyOTcw","avatar_url":"https://avatars0.githubusercontent.com/u/36242970?v=4","gravatar_id":"","url":"https://api.github.com/users/Vidhu211","html_url":"https://github.com/Vidhu211","followers_url":"https://api.github.com/users/Vidhu211/followers","following_url":"https://api.github.com/users/Vidhu211/following{/other_user}","gists_url":"https://api.github.com/users/Vidhu211/gists{/gist_id}","starred_url":"https://api.github.com/users/Vidhu211/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Vidhu211/subscriptions","organizations_url":"https://api.github.com/users/Vidhu211/orgs","repos_url":"https://api.github.com/users/Vidhu211/repos","events_url":"https://api.github.com/users/Vidhu211/events{/privacy}","received_events_url":"https://api.github.com/users/Vidhu211/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-11-08T17:38:10Z","updated_at":"2018-11-08T17:38:10Z","closed_at":null,"author_association":"NONE","body":"Thanks for creating an issue! But first: did you read our community guidelines?\r\nhttps://cuckoo.sh/docs/introduction/community.html\r\n\r\n##### My issue is:\r\nI'm able to run the cuckoo web and the Host program runs fine. Even i'm able to load the malware into the interface \r\n\r\nProblem is when i proceed to view the generated report after analysis. It did not run any analysis on the agent.\r\n\r\nThe VM, network, snapshot are all fine. no issues with it. I'm able to start my VM from the command line, \r\n \r\n##### My Cuckoo version and operating system are:\r\nCuckoo agent is running inside a Win7 VM installed in virtualbox and the host runs inside of Ubuntu 17\r\n##### This can be reproduced by:\r\n\r\n##### The log, error, files etc can be found at:\r\ncuckoo.log\r\ncuckoo@vs:~$ cuckoo \r\n\r\n   ______   __  __   ______   ___   ___   ______   ______\r\n  /_____/\\ /_/\\/_/\\ /_____/\\ /___/\\/__/\\ /_____/\\ /_____/\\\r\n  \\:::__\\/ \\:\\ \\:\\ \\\\:::__\\/ \\::.\\ \\\\ \\ \\\\:::_ \\ \\\\:::_ \\ \\\r\n   \\:\\ \\  __\\:\\ \\:\\ \\\\:\\ \\  __\\:: \\/_) \\ \\\\:\\ \\ \\ \\\\:\\ \\ \\ \\\r\n    \\:\\ \\/_/\\\\:\\ \\:\\ \\\\:\\ \\/_/\\\\:. __  ( ( \\:\\ \\ \\ \\\\:\\ \\ \\ \\\r\n     \\:\\_\\ \\ \\\\:\\_\\:\\ \\\\:\\_\\ \\ \\\\: \\ )  \\ \\ \\:\\_\\ \\ \\\\:\\_\\ \\ \\\r\n      \\_____\\/ \\_____\\/ \\_____\\/ \\__\\/\\__\\/  \\_____\\/ \\_____\\/\r\n\r\n Cuckoo Sandbox 2.0.6\r\n www.cuckoosandbox.org\r\n Copyright (c) 2010-2018\r\n\r\n Checking for updates...\r\n You're good to go!\r\n\r\n Our latest blogposts:\r\n * IQY malspam campaign, October 15, 2018.\r\n   Analysis of a malspam campaign leveraging .IQY (Excel Web Query) files containing DDE to achieve code execution.\r\n   More at https://hatching.io/blog/iqy-malspam\r\n\r\n * Hooking VBScript execution in Cuckoo, October 03, 2018.\r\n   Details on implementation of Visual Basic Script instrumentation for Cuckoo Monitor for extraction of dynamically executed VBScript.\r\n   More at https://hatching.io/blog/vbscript-hooking\r\n\r\n * Cuckoo Sandbox 2.0.6 pentest, September 18, 2018.\r\n   Cuckoo Sandbox 2.0.6 public pentest performed by Cure53 and sponsored by PolySwarm!\r\n   More at https://hatching.io/blog/cuckoo-206-pentest\r\n\r\n * Cuckoo Sandbox 2.0.6, June 07, 2018.\r\n   Interim release awaiting the big release.\r\n   More at https://cuckoosandbox.org/blog/206-interim-release\r\n\r\n * Cuckoo Sandbox 2.0.5: Office DDE, December 03, 2017.\r\n   Brand new release based on a DDE case study.\r\n   More at https://cuckoosandbox.org/blog/205-office-dde\r\n\r\n2018-11-08 22:13:04,088 [cuckoo] WARNING: It appears that you haven't loaded any Cuckoo Signatures. Signatures are highly recommended and improve & enrich the information extracted during an analysis. They also make up for the analysis score that you see in the Web Interface - so, pretty important!\r\n2018-11-08 22:13:04,088 [cuckoo] WARNING: You'll be able to fetch all the latest Cuckoo Signaturs, Yara rules, and more goodies by running the following command:\r\n2018-11-08 22:13:04,088 [cuckoo] INFO: $ cuckoo community\r\n2018-11-08 22:13:04,089 [cuckoo.core.scheduler] INFO: Using \"virtualbox\" as machine manager\r\n2018-11-08 22:13:05,692 [cuckoo.core.scheduler] INFO: Loaded 1 machine/s\r\n2018-11-08 22:13:05,705 [cuckoo.core.scheduler] INFO: Waiting for analysis tasks.\r\n2018-11-08 22:14:52,864 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"rbot.exe\" (task #9, options \"procmemdump=yes,route=none\")\r\n2018-11-08 22:14:53,097 [cuckoo.core.scheduler] INFO: Task #9: acquired machine cuckoo1 (label=windows7)\r\n2018-11-08 22:14:53,138 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 3124 (interface=vboxnet0, host=192.168.56.101)\r\n2018-11-08 22:14:59,729 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=192.168.56.101)\r\n2018-11-08 22:15:03,939 [cuckoo.core.guest] INFO: Guest is running Cuckoo Agent 0.8 (id=cuckoo1, ip=192.168.56.101)\r\n2018-11-08 22:16:04,869 [cuckoo.core.guest] INFO: Virtual Machine /status failed (CuckooGuestError('Cuckoo Agent failed without error status, please try upgrading to the latest version of agent.py (>= 0.8) and notify us if the issue persists.',))\r\n2018-11-08 22:18:05,631 [cuckoo.core.guest] INFO: cuckoo1: end of analysis reached!\r\n2018-11-08 22:18:10,899 [cuckoo.processing.behavior] WARNING: Analysis results folder does not contain any behavior log files.\r\n2018-11-08 22:18:11,833 [cuckoo.core.scheduler] INFO: Task #9: reports generation completed\r\n2018-11-08 22:18:11,839 [cuckoo.core.scheduler] INFO: Task #9: analysis procedure completed\r\n\r\n\r\n![screenshot from 2018-11-08 23-00-30](https://user-images.githubusercontent.com/36242970/48216577-1372bf00-e3ab-11e8-8e5c-5bd908cfe201.png)\r\n![screenshot from 2018-11-08 23-06-45](https://user-images.githubusercontent.com/36242970/48216578-140b5580-e3ab-11e8-9df6-6de1d020a266.png)\r\n\r\nIf it is a trivial issue, forgive me, im new to this trade"}}
{"actor":{"display_login":"Vidhu211"}}