Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cape Sandbox linux analysis #488

Closed
MU-03 opened this issue Mar 1, 2023 · 0 comments
Closed

Cape Sandbox linux analysis #488

MU-03 opened this issue Mar 1, 2023 · 0 comments

Comments

@MU-03
Copy link

MU-03 commented Mar 1, 2023

I am currently running CAPEv2 for doing malware analysis, I have been doing analysis on windows 10 guest machine but I want to enable a linux machine for analysis. I have tried a number of liunx OS like ubuntu 16.04, 18.04, 20.04 but as we know that agent of cape runs on 32 bit python so by running the commands given in cape documentation I seem to lose functionalities in the machines like loss of terminal or loss of internet etc , I can make the agent run but lose internet access in the machine due to changing python architecture.

Can you suggest me which ubuntu version or any other linux to use, and why am I getting these kind of problems even by following the commands on cape document.

Following are the commands I ran on x64 bit ubuntu linux:
$ sudo dpkg --add-architecture i386
$ sudo apt update
$ sudo apt install python3:i386 -y
$ sudo apt install systemtap-runtime -y
$ curl -sSL https://bootstrap.pypa.io/get-pip.py -o get-pip.py
$ python3 get-pip.py
$ python3 -m pip install pyinotify
$python3 /path/to/agent.py
And I used x86 ubuntu 16.04 which had older python version but even updating it disturbed the OS.

Following are the commands I used to in 32bit OS:
$ sudo apt update
$ sudo apt install python3-pip systemtap-runtime
$ pip3 install pyinotify
And also changed python version to 3.7.9 that is compatible with the agent.

Need guidance.
Regards

@MU-03 MU-03 closed this as completed Mar 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant