Cuckoo 沙箱 - AnalysisManager.run 失败

Cuckoo 沙箱 - AnalysisManager.run 失败

我在 Debian 10 和 Ubuntu 客户虚拟机上运行了 cuckoo。我提交了一个文件进行分析,它运行并显示“已报告”,但报告加载了一个 404 页面。我在 cuckoo 服务器上看到以下内容:

Traceback (most recent call last):
  File "/home/cuckoo/venv/local/lib/python2.7/site-packages/cuckoo/core/scheduler.py", line 755, in run
    self.launch_analysis()
  File "/home/cuckoo/venv/local/lib/python2.7/site-packages/cuckoo/core/scheduler.py", line 639, in launch_analysis
    machinery.stop(self.machine.label)
  File "/home/cuckoo/venv/local/lib/python2.7/site-packages/cuckoo/machinery/physical.py", line 106, in stop
    output = subprocess.check_output(args)
  File "/usr/lib/python2.7/subprocess.py", line 223, in check_output
    raise CalledProcessError(retcode, cmd, output=output)
CalledProcessError: Command '['net', 'rpc', 'shutdown', '-I', u'192.168.0.161', '-U', '<redacted>%<redacted>', '-r', '-f', '--timeout=5']' returned non-zero exit status 255

代理正在客户虚拟机上运行,​​并且所有其他操作似乎都正常,cuckoo 服务器能够与其通信。

2023-08-30 13:55:05,582 [cuckoo.machinery.physical] DEBUG: Getting status for machine: ubuntusrv20.
2023-08-30 13:55:05,606 [cuckoo.machinery.physical] DEBUG: Machine already running: ubuntusrv20.
2023-08-30 13:55:05,691 [cuckoo.core.guest] INFO: Starting analysis #46 on guest (id=ubuntusrv20, ip=192.168.0.161)
2023-08-30 13:55:05,721 [cuckoo.core.guest] DEBUG: ubuntusrv20: waiting for status 0x0001
2023-08-30 13:55:19,199 [cuckoo.core.guest] DEBUG: ubuntusrv20: status ready
2023-08-30 13:55:19,218 [cuckoo.core.guest] DEBUG: Uploading analyzer to guest (id=ubuntusrv20, ip=192.168.0.161, monitor=latest, size=30535)
2023-08-30 13:55:19,275 [cuckoo.core.guest] DEBUG: ubuntusrv20: analyzer started with PID 3038
2023-08-30 13:58:18,375 [cuckoo.core.guest] DEBUG: ubuntusrv20: analysis not completed yet (status=2)
2023-08-30 13:58:19,412 [cuckoo.core.guest] INFO: ubuntusrv20: end of analysis reached!
2023-08-30 13:58:19,472 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Replay
2023-08-30 13:58:19,515 [cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer

提前致谢。

相关内容