How do I extract specific files from Cuckoo Sandbox VM?

女生的网名这么多〃 提交于 2021-02-11 14:13:56

问题


I study about ransomware behavior with cuckoo sandbox. I need to get encrypted files and threatening letter which those made by ransomware, but they exist on my Cuckoo Sandbox VM. How do I extract specific files from its VM?

my environment:
cuckoo sandbox 2.06
Host OS:Ubuntu 18.04
Guest OS:Windows7SP1x86(without guest additions)
VM soft: Virtual Box 5.2


回答1:


You can get the requiere time to handle your manipulatiuons by: 1- specify a hight number of second either using command line (ex --timeout 300) or GUI. 2- Force waiting the time out (add --enforce-timeout in the command line) or using the GUI. 3- copy the requiered files in rhe chared folder. 4- to get the displayed message made by he ransomware, you can take screenshot from the host machine.



来源:https://stackoverflow.com/questions/58987722/how-do-i-extract-specific-files-from-cuckoo-sandbox-vm

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!