Cuckootool

Automating analysis of suspicious files

This project is maintained by laincode

Usage:

$ python cuckootool.py [options]

Examples:

Submit a local binary:

    $ python cuckootool.py -s --file /tmp/bin.exe

Submit a local binary and take a full memory dump of the analysis machine to be run on virtual machine cuckoo3:

    $ python cuckootool.py -s --file /tmp/bin.exe --memory --machine=cuckoo3 

Submit a directory of binaries:

    $ python cuckootool.py -s --dir /tmp/

Submit URL:

    $ python cuckootool.py -s --url http://www.malicious.site

Tasks List:

    $ python cuckootool.py --tasklist 

Task View:

    $ python cuckootool.py --taskview 2

Delete Task:

    $ python cuckootool.py --remove 1

File View:

    $ python cuckootool.py --view --id 5
    $ python cuckootool.py --view --md5 d1f9fba807a3b6f75a6ed1c6c47ce375
    $ python cuckootool.py --view --sha256 490c68ac770d7b7ffe39fd2bd026f2c6063ead41e7be2bc1c391adb7a7bf

Get File:

   $ python cuckootool.py --getfile <SHA256>

Task Report:

   $ python cuckootool.py --report 1

Machines View:

  $ python cuckootool.py --machineview cuckoo1

Machines List:

  $ python cuckootool.py --machinelist