cuckoo-modified icon indicating copy to clipboard operation
cuckoo-modified copied to clipboard

[lib.cuckoo.core.scheduler] ERROR: Analysis failed: system restarted unexpectedly

Open jmolokovit opened this issue 10 years ago • 5 comments

Hi ! I may have a problem : error message above. Nothing more... in debug mode. I can copy paste my config files.. just tell me please.

Thx in advance ! Regards

jmolokovit avatar Nov 23 '15 14:11 jmolokovit

What's the hash of the file that was being analyzed? This error can be seen sometimes, but generally you should at least have some behavioral/static results still. It's a last-ditch detection for when the system restarts due to bluescreens from kernel drivers or critical processes crashing.

-Brad

brad-sp avatar Nov 23 '15 15:11 brad-sp

Thanks for your answer. I've tested with conficker binaries (from contagiodump) . Now i tested with other rtf file and get the same result.

I think it's maybe a problem with my config :( As i installed and confgiured it for the first time, but can't see why... :( I tested with cuckoo 2.0 "The analysis hit the critical timeout, terminating" with same file.

2015-11-23 16:57:52,742 [lib.cuckoo.core.scheduler] ERROR: Analysis failed: system restarted unexpectedly

i will retry from scratch...

jmolokovit avatar Nov 23 '15 16:11 jmolokovit

I've reinstalled all (Ubuntu 14.04 + Virtualbox), withouth any problem. I tested with several files to analyse (DarkComet.exe = 0cc0eb5059dfc9628d73384bb3339619f53044f5 ) i've got a final report indeed (but no Process information in it) and an error finally : The analysis hit the critical timeout, terminating.

regards

jmolokovit avatar Nov 24 '15 13:11 jmolokovit

That sample works fine here. Are you sure you set up the VM properly with the agent running at the time the VM was snapshotted?

brad-sp avatar Nov 24 '15 16:11 brad-sp

im getting same error for: 1f8f6bd0839a682c5f0ec26ceeb5c0ed060df0c82e0fb8b6b6ac869d8185ac75

limited-root avatar Jun 06 '16 07:06 limited-root