Automating analysis of suspicious files
This project is maintained by laincode
$ python cuckootool.py [options]
Submit a local binary:
$ python cuckootool.py -s --file /tmp/bin.exe
Submit a local binary and take a full memory dump of the analysis machine to be run on virtual machine cuckoo3:
$ python cuckootool.py -s --file /tmp/bin.exe --memory --machine=cuckoo3
Submit a directory of binaries:
$ python cuckootool.py -s --dir /tmp/
Submit URL:
$ python cuckootool.py -s --url http://www.malicious.site
Tasks List:
$ python cuckootool.py --tasklist
Task View:
$ python cuckootool.py --taskview 2
Delete Task:
$ python cuckootool.py --remove 1
File View:
$ python cuckootool.py --view --id 5
$ python cuckootool.py --view --md5 d1f9fba807a3b6f75a6ed1c6c47ce375
$ python cuckootool.py --view --sha256 490c68ac770d7b7ffe39fd2bd026f2c6063ead41e7be2bc1c391adb7a7bf
Get File:
$ python cuckootool.py --getfile <SHA256>
Task Report:
$ python cuckootool.py --report 1
Machines View:
$ python cuckootool.py --machineview cuckoo1
Machines List:
$ python cuckootool.py --machinelist