It seems Cuckoo JSON reporting format as been modified and this project does not work anymore. I don't have time to maintain it but feel free to fork it to make it up to date.
Original description : The Malware Instruction Set (MIST) is a representation for monitored behavior of malicious software. The representation is optimized for effective and efficient analysis of behavior using data mining and machine learn- ing techniques. It can be obtained automatically during analysis of malware with a behavior monitoring tool or by converting existing behavior reports. The representation is not restricted to a particular monitoring tool and thus can also be used as a meta language to unify behavior reports of different sources.
I'm using the awesome Cuckoo Sandbox and I wanted to be able to use malheur with it.
Unfortunately, Cuckoo cannot produce the reports in mist as needed by malheur. I found no working and easy solution to convert the reports from Cuckoo to mist file that malheur could use. Philipp Trinius wrote Cuckoo2Mist that does just that, but sadly, this project is not maintained, does not work with the current Cuckoo reports nor Python 3.
This project aims to update Cuckoo2Mist so it is maintained and well documented.
Do not hesite to contribute !
This project is composed of two folders :
Cuckoo2Mistwhich contains the main script to convert JSON to MIST.CuckooModulewhich contains a Cuckoo module which automatically run the Cuckoo2Mist script after each analysis.
This project helped you ? You can buy me a cup of coffee
