Country Name is unknown in Cuckoo Reports

[masifpak]

Country name is unknown in malware reports. What i have to do so that there is country name instead of just unknown.

[doomedraven]

maybe update geo file database, search in code where it is and update with latest version

[Nwinternights]

https://github.com/brad-accuvant/cuckoo-modified/issues/140

[masifpak]

Thanks for the link. It is working but pushed me in another problem. Now analysis start taking extra ordinary time, even more than 30 minutes and every analysis end with message.

"Error: The analysis hit the critical timeout, terminating."

Now countries scanning, or i don't know what it is doing,. Below list goes to more than 400 countries.

[Nwinternights]

probably your sample is a sort of cerber that trying to connect to multiple C&C. normal behaviour. to speed up reverse lookup task take a look here https://github.com/spender-sandbox/cuckoo-modified/issues/385