What part of cuckoo generated report is from Virustotal.
masifpak opened this issue · comments
I have deployed Cuckoo for malware analysis. I want to understand following queries.
What part of report is get from virustotal. I mean does we integrate whole virustotal report in cuckoo report or some part.
Cuckoo shows Behavior Analysis and static analysis from virus total or its own.
become familiar with project structure will save you a lot of time
https://github.com/spender-sandbox/cuckoo-modified/tree/master/modules/processing
The behavioural analysis and static analysis are performed by Cuckoo. As doomedraven suggests, the code for this is in the processing subdirectory, and the VirusTotal lookups may be completely disabled by configuring the [virustotal] section of conf\processing.conf, setting enabled = no. Then what will remain will only be Cuckoo.
Apologies for bumping what is such an old post - should have checked the date before replying!