Search icon Close icon
Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Checkout

Change country

Modal Close icon
Country selected Country selected
country flag United States
Country selected
country flag Great Britain
Country selected
country flag India
Country selected
country flag Germany
Country selected
country flag France
Country selected
country flag Canada
Country selected
country flag Russia
Country selected
country flag Spain
Country selected
country flag Brazil
Country selected
country flag Australia
Country selected
country flag Singapore
Country selected
country flag Canary Islands
Country selected
country flag Hungary
Country selected
country flag Ukraine
Country selected
country flag Luxembourg
Country selected
country flag Estonia
Country selected
country flag Lithuania
Country selected
country flag South Korea
Country selected
country flag Turkey
Country selected
country flag Switzerland
Country selected
country flag Colombia
Country selected
country flag Taiwan
Country selected
country flag Chile
Country selected
country flag Norway
Country selected
country flag Ecuador
Country selected
country flag Indonesia
Country selected
country flag New Zealand
Country selected
country flag Cyprus
Country selected
country flag Denmark
Country selected
country flag Finland
Country selected
country flag Poland
Country selected
country flag Malta
Country selected
country flag Czechia
Country selected
country flag Austria
Country selected
country flag Sweden
Country selected
country flag Italy
Country selected
country flag Egypt
Country selected
country flag Belgium
Country selected
country flag Portugal
Country selected
country flag Slovenia
Country selected
country flag Ireland
Country selected
country flag Romania
Country selected
country flag Greece
Country selected
country flag Argentina
Country selected
country flag Netherlands
Country selected
country flag Bulgaria
Country selected
country flag Latvia
Country selected
country flag South Africa
Country selected
country flag Malaysia
Country selected
country flag Japan
Country selected
country flag Slovakia
Country selected
country flag Philippines
Country selected
country flag Mexico
Country selected
country flag Thailand
Country selected
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Home > Security > Malware Analysis > Cuckoo Malware Analysis
Cuckoo Malware Analysis
Cuckoo Malware Analysis

Cuckoo Malware Analysis: Analyze malware using Cuckoo Sandbox

Arrow left icon
Profile Icon Digit Oktavianto Profile Icon Iqbal Muhardianto
Arrow right icon
$41.99
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3 (6 Ratings)
Paperback Oct 2013 142 pages 1st Edition
eBook
$22.49 $24.99
Paperback
$41.99
Subscription
Free Trial
Renews at $19.99p/m
Arrow left icon
Profile Icon Digit Oktavianto Profile Icon Iqbal Muhardianto
Arrow right icon
$41.99
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3 (6 Ratings)
Paperback Oct 2013 142 pages 1st Edition
eBook
$22.49 $24.99
Paperback
$41.99
Subscription
Free Trial
Renews at $19.99p/m
eBook
$22.49 $24.99
Paperback
$41.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with Print?

Product feature icon Instant access to your digital copy whilst your Print order is Shipped
Product feature icon Paperback book shipped to your preferred address
Product feature icon Redeem a companion digital copy on all Print orders
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want

Contact Details

Modal Close icon
Payment Processing...
tick Completed

Shipping Address

Billing Address

Shipping Methods
Table of content icon View table of contents Preview book icon Preview Book

Cuckoo Malware Analysis

Chapter 2. Using Cuckoo Sandbox to Analyze a Sample Malware

The first chapter has explained about how to install Cuckoo Sandbox and configure the Host OS and Guest OS. In this chapter, we will cover the following topics:

  • How to submit a malware sample
  • How to analyze a sample of malware
  • Memory forensic analysis in Cuckoo Sandbox

Starting Cuckoo

First, we must go to the root directory of the previously extracted Cuckoo. This time, the root directory is home/user/Documents/cuckoo.

We do not need to start VirtualBox to run the Guest OS (in this case, the guest OS is Windows XP SP3) in order to receive the malware sample. You must turn it off after configuring and installing some Windows applications mentioned before (for example, Adobe Reader, Microsoft Office, and so on). Do not forget to snapshot your current VM (virtual machine)—as it will be used several times—so that Cuckoo will start a fresh VM every time it runs the analysis. There are other ways to make the VM take snapshots. To do this using VirtualBox window, open its main window and click on the Take Snapshot button under Machine. (Snapshots can be taken when your Guest OS is started.)

Now we will start Cuckoo Sandbox. As explained before, type the following command line in the terminal and run:

$ python cuckoo.py

Note

cuckoo.py accepts some...

Submitting malware samples to Cuckoo Sandbox

For submitting malware samples, Cuckoo Sandbox has a command utility in its utils folder. To submit a malware sample run the following command in the terminal:

$ ./utils/submit.py [optional arguments] [positional argument]

As described in the previous section, we know that the arguments can be filled by:

  • [optional arguments]:
    • -h, --help: This argument shows this help message and exits
    • --url: This argument specifies whether the target is an URL or not
    • --package PACKAGE: This argument specifies an analysis package
    • --custom CUSTOM: This argument specifies any custom value
    • --timeout TIMEOUT: This argument specifies an analysis timeout
    • --options OPTIONS: This argument specifies options for the analysis package (for example, name=value,name2=value2)
    • --priority PRIORITY: This argument specifies a priority for the analysis represented by an integer
    • --machine MACHINE: This argument specifies the identifier of a machine you want to use
    • --platform PLATFORM: This argument...

Submitting a malware Word document

This section deals with Word documents that contain malware samples. Please make sure that you have installed the Microsoft Office bundle program in your VM environment. Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will submit a document dealing with Iran's Oil and Nuclear Situation. Perform the following steps:

  1. Open a new tab in the terminal and type the following command:
    $ python utils/submit.py --pla
tform windows –package doc shares/Iran\'s\ Oil\ and\ Nuclear\ Situation.doc

    In this case, the document is located inside the shares folder. You have to change the location based on where your document is.

    Submitting a malware Word document

    Please make sure you get a Success message like the preceding screenshot with task with ID 7 (it is the ID that depends on how many times you tried to submit a malware). Cuckoo will then start the latest snapshot of the virtual machine we&apos...

Submitting a malware PDF document – aleppo_plan_cercs.pdf

In this section, we'll deal with PDF documents that contain malware samples and prepare to submit those. Please make sure you have installed a PDF reader application in your VM environment (I recommend you use Adobe Acrobat Reader). Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will now submit a PDF file as a malware document. Let us see the steps involved:

  1. Open a new Terminal tab (Shift + Ctrl + T) and type in the following command line:
    $ python uti
ls/submit.py --platform windows --package pdf shares/aleppo_plan_cercs.pdf
  2. After that, press Tab when the typing reaches aleppo (document real name contains Arabic characters, and unfortunately, Cuckoo Sandbox seems to not support Arabic characters so we need to rename it to aleppo_plan_crecs.pdf). In this case the document is located inside the shares folder. We have to change it...

Submitting a malware Excel document – CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls

This section deals with spreadsheet documents that contain malware samples. Please make sure that you have installed the Microsoft Office bundled program in your VM environment. Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will now submit an Excel file as the malware document. Let us see the steps involved:

  1. Open a new Terminal tab (Shift + Ctrl + T) and type in the following command line:
    $ python utils/submit.py --platform windows --package xls  shares/CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls
    Submitting a malware Excel document – CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls

    Please make sure you have a Success message, as shown in the preceding screenshot, with task with ID 13. Windows will open the Excel document.

  2. Then let Cuckoo start the analysis process on the Guest OS:
    Submitting a malware Excel document – CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls
  3. A warning pop-up window will appear. Again, we assume that the user didn't know what that warning...

Starting Cuckoo

First, we must go to the root directory of the previously extracted Cuckoo. This time, the root directory is home/user/Documents/cuckoo.

We do not need to start VirtualBox to run the Guest OS (in this case, the guest OS is Windows XP SP3) in order to receive the malware sample. You must turn it off after configuring and installing some Windows applications mentioned before (for example, Adobe Reader, Microsoft Office, and so on). Do not forget to snapshot your current VM (virtual machine)—as it will be used several times—so that Cuckoo will start a fresh VM every time it runs the analysis. There are other ways to make the VM take snapshots. To do this using VirtualBox window, open its main window and click on the Take Snapshot button under Machine. (Snapshots can be taken when your Guest OS is started.)

Now we will start Cuckoo Sandbox. As explained before, type the following command line in the terminal and run:

$ python cuckoo.py

Note

cuckoo.py accepts some command line options...

Submitting malware samples to Cuckoo Sandbox

For submitting malware samples, Cuckoo Sandbox has a command utility in its utils folder. To submit a malware sample run the following command in the terminal:

$ ./utils/submit.py [optional arguments] [positional argument]

As described in the previous section, we know that the arguments can be filled by:

  • [optional arguments]:

    • -h, --help: This argument shows this help message and exits

    • --url: This argument specifies whether the target is an URL or not

    • --package PACKAGE: This argument specifies an analysis package

    • --custom CUSTOM: This argument specifies any custom value

    • --timeout TIMEOUT: This argument specifies an analysis timeout

    • --options OPTIONS: This argument specifies options for the analysis package (for example, name=value,name2=value2)

    • --priority PRIORITY: This argument specifies a priority for the analysis represented by an integer

    • --machine MACHINE: This argument specifies the identifier of a machine you want to use

    • --platform PLATFORM...

Submitting a malware Word document

This section deals with Word documents that contain malware samples. Please make sure that you have installed the Microsoft Office bundle program in your VM environment. Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will submit a document dealing with Iran's Oil and Nuclear Situation. Perform the following steps:

  1. Open a new tab in the terminal and type the following command:

    $ python utils/submit.py --pla
tform windows –package doc shares/Iran\'s\ Oil\ and\ Nuclear\ Situation.doc

    In this case, the document is located inside the shares folder. You have to change the location based on where your document is.

    Please make sure you get a Success message like the preceding screenshot with task with ID 7 (it is the ID that depends on how many times you tried to submit a malware). Cuckoo will then start the latest snapshot of the virtual machine we've made. Windows will...

Submitting a malware PDF document – aleppo_plan_cercs.pdf

In this section, we'll deal with PDF documents that contain malware samples and prepare to submit those. Please make sure you have installed a PDF reader application in your VM environment (I recommend you use Adobe Acrobat Reader). Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will now submit a PDF file as a malware document. Let us see the steps involved:

  1. Open a new Terminal tab (Shift + Ctrl + T) and type in the following command line:

    $ python uti
ls/submit.py --platform windows --package pdf shares/aleppo_plan_cercs.pdf

  2. After that, press Tab when the typing reaches aleppo (document real name contains Arabic characters, and unfortunately, Cuckoo Sandbox seems to not support Arabic characters so we need to rename it to aleppo_plan_crecs.pdf). In this case the document is located inside the shares folder. We have to change it based on where...

Submitting a malware Excel document – CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls

This section deals with spreadsheet documents that contain malware samples. Please make sure that you have installed the Microsoft Office bundled program in your VM environment. Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

We will now submit an Excel file as the malware document. Let us see the steps involved:

  1. Open a new Terminal tab (Shift + Ctrl + T) and type in the following command line:

    $ python utils/submit.py --platform windows --package xls  shares/CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls

    Please make sure you have a Success message, as shown in the preceding screenshot, with task with ID 13. Windows will open the Excel document.

  2. Then let Cuckoo start the analysis process on the Guest OS:

  3. A warning pop-up window will appear. Again, we assume that the user didn't know what that warning was. So,...

Submitting a malicious URL – http://youtibe.com

This section deals with submitting a malicious URL for malware analysis. By default, the browser in the VM environment is Internet Explorer. You can use the default IE or another web browser. Do not forget to install a flash add-on in your browser. Internet connection in your VM environment is also needed to make sure that the malware analysis can run smoothly in your VM environment.

Since we will run a malicious URL, a network configuration change must be made. In Chapter 1, Getting Started with Automated Malware Analysis using Cuckoo Sandbox, we set the Network in our VM as Host-only Adapter to prevent the malware from making contact outside the Host. To submit a malware URL we must set the Network adapter in the Guest OS to connect to the Internet. To do it:

  1. Make sure you have your VM turned off first.

  2. Simply right-click on the VM and pick Settings.... A new window will appear.

  3. Select Network, tick the checkbox Enable Network Adapter, and from...

Left arrow icon

Page 1 of 12

Right arrow icon

Key benefits

  • Learn how to analyze malware in a straightforward way with minimum technical skills
  • Understand the risk of the rise of document-based malware
  • Enhance your malware analysis concepts through illustrations, tips and tricks, step-by-step instructions, and practical real-world scenarios
  • To download updated sample example click here

Description

Cuckoo Sandbox is a leading open source automated malware analysis system. This means that you can throw any suspicious file at it and, in a matter of seconds, Cuckoo will provide you with some detailed results outlining what said file did when executed inside an isolated environment. Cuckoo Malware Analysis is a hands-on guide that will provide you with everything you need to know to use Cuckoo Sandbox with added tools like Volatility, Yara, Cuckooforcanari, Cuckoomx, Radare, and Bokken, which will help you to learn malware analysis in an easier and more efficient way. Cuckoo Malware Analysis will cover basic theories in sandboxing, automating malware analysis, and how to prepare a safe environment lab for malware analysis. You will get acquainted with Cuckoo Sandbox architecture and learn how to install Cuckoo Sandbox, troubleshoot the problems after installation, submit malware samples, and also analyze PDF files, URLs, and binary files. This book also covers memory forensics – using the memory dump feature, additional memory forensics using Volatility, viewing result analyses using the Cuckoo analysis package, and analyzing APT attacks using Cuckoo Sandbox, Volatility, and Yara. Finally, you will also learn how to screen Cuckoo Sandbox against VM detection and how to automate the scanning of e-mail attachments with Cuckoo.

Who is this book for?

Cuckoo Malware Analysis is great for anyone who wants to analyze malware through programming, networking, disassembling, forensics, and virtualization. Whether you are new to malware analysis or have some experience, this book will help you get started with Cuckoo Sandbox so you can start analysing malware effectively and efficiently.

What you will learn

  • Get started with automated malware analysis using Cuckoo Sandbox
  • Use Cuckoo Sandbox to analyze sample malware
  • Analyze output from Cuckoo Sandbox
  • Report results with Cuckoo Sandbox in standard form
  • Learn tips and tricks to get the most out of your malware analysis results
Estimated delivery fee Deliver to United States

Economy delivery 10 - 13 business days

Free $6.95

Premium delivery 6 - 9 business days

$21.95
(Includes tracking information)

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Oct 16, 2013
Length: 142 pages
Edition : 1st
Language : English
ISBN-13 : 9781782169239
Category :
Security
Languages :
Python
Concepts :
Malware Analysis
Tools :
Cuckoo Sandbox

What do you get with Print?

Product feature icon Instant access to your digital copy whilst your Print order is Shipped
Product feature icon Paperback book shipped to your preferred address
Product feature icon Redeem a companion digital copy on all Print orders
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want

Contact Details

Modal Close icon
Payment Processing...
tick Completed

Shipping Address

Billing Address

Shipping Methods
Estimated delivery fee Deliver to United States

Economy delivery 10 - 13 business days

Free $6.95

Premium delivery 6 - 9 business days

$21.95
(Includes tracking information)

Product Details

Publication date : Oct 16, 2013
Length: 142 pages
Edition : 1st
Language : English
ISBN-13 : 9781782169239
Category :
Security
Languages :
Python
Concepts :
Malware Analysis
Tools :
Cuckoo Sandbox

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
START FREE TRIAL
BUY NOW
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
START FREE TRIAL
BUY NOW
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
START FREE TRIAL
BUY NOW

Frequently bought together

Cuckoo Malware Analysis
Cuckoo Malware Analysis
Read more
Oct 2013 142 pages
Full star icon 3 (6)
eBook
eBook
  • eBook eBook $22.49
  • Paperback Paperback $41.99
$22.49 $24.99
$41.99
Windows Malware Analysis Essentials
Windows Malware Analysis Essentials
Read more
Sep 2015 330 pages
Full star icon 5 (4)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Learning Malware Analysis
Learning Malware Analysis
Read more
Jun 2018 510 pages
Full star icon 4.7 (30)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Stars icon
Total $ 151.97
Cuckoo Malware Analysis
$41.99
Windows Malware Analysis Essentials
$54.99
Learning Malware Analysis
$54.99
Total $ 151.97 Stars icon

Table of Contents

6 Chapters
1. Getting Started with Automated Malware Analysis using Cuckoo Sandbox Chevron down icon Chevron up icon
1. Getting Started with Automated Malware Analysis using Cuckoo Sandbox
Malware analysis methodologies
Basic theory in Sandboxing
Malware analysis lab
Cuckoo Sandbox
Installing Cuckoo Sandbox
Summary
2. Using Cuckoo Sandbox to Analyze a Sample Malware Chevron down icon Chevron up icon
2. Using Cuckoo Sandbox to Analyze a Sample Malware
Starting Cuckoo
Submitting malware samples to Cuckoo Sandbox
Submitting a malware Word document
Submitting a malware PDF document – aleppo_plan_cercs.pdf
Submitting a malware Excel document – CVE-2011-0609_XLS-SWF-2011-03-08_crsenvironscan.xls
Submitting a malicious URL – http://youtibe.com
Submitting a malicious URL – http://ziti.cndesign.com/biaozi/fdc/page_07.htm
Submitting a binary file – Sality.G.exe
Memory forensic using Cuckoo Sandbox – using memory dump features
Additional memory forensic using Volatility
Summary
3. Analyzing the Output of Cuckoo Sandbox Chevron down icon Chevron up icon
3. Analyzing the Output of Cuckoo Sandbox
The processing module
Analyzing an APT attack using Cuckoo Sandbox, Volatility, and Yara
Summary
4. Reporting with Cuckoo Sandbox Chevron down icon Chevron up icon
4. Reporting with Cuckoo Sandbox
Creating a built-in report in HTML format
Creating a MAEC Report
Exporting data report analysis from Cuckoo to another format
Summary
5. Tips and Tricks for Cuckoo Sandbox Chevron down icon Chevron up icon
5. Tips and Tricks for Cuckoo Sandbox
Hardening Cuckoo Sandbox against VM detection
Cuckooforcanari – integrating Cuckoo Sandbox with the Maltego project
Automating e-mail attachments with Cuckoo MX
Summary
Index Chevron down icon Chevron up icon
Index

Recommendations for you

Left arrow icon
CompTIA® Security+® SY0-701 Certification Guide
CompTIA® Security+® SY0-701 Certification Guide
Read more
Jan 2024 634 pages
Full star icon 4.9 (231)
Paperback
Paperback
  • Paperback Paperback $54.99
$54.99
Bash Shell Scripting for Pentesters
Bash Shell Scripting for Pentesters
Read more
Dec 2024 402 pages
Full star icon 5 (1)
eBook
eBook
  • eBook eBook $32.39
  • Paperback Paperback $44.99
$32.39 $35.99
$44.99
The Ultimate Kali Linux Book
The Ultimate Kali Linux Book
Read more
Apr 2024 828 pages
Full star icon 4.8 (31)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Microsoft Defender for Identity in Depth
Microsoft Defender for Identity in Depth
Read more
Dec 2024 380 pages
eBook
eBook
  • eBook eBook $32.39
  • Paperback Paperback $44.99
$32.39 $35.99
$44.99
CompTIA Security+ SY0-701 Practice Tests
CompTIA Security+ SY0-701 Practice Tests
Read more
Dec 2024 260 pages
Paperback
Paperback
  • Paperback Paperback $24.99
$24.99
Mastering Linux Security and Hardening
Mastering Linux Security and Hardening
Read more
Feb 2023 620 pages
Full star icon 4.6 (34)
eBook
eBook
  • eBook eBook $35.99
  • Paperback Paperback $49.99
  • Hardcover Hardcover $69.99
$35.99 $39.99
$49.99
$69.99
Malware Development for Ethical Hackers
Malware Development for Ethical Hackers
Read more
Jun 2024 402 pages
Full star icon 4.4 (10)
eBook
eBook
  • eBook eBook $28.59
  • Paperback Paperback $43.99
$28.59 $43.99
$43.99 $54.99
Mastering Microsoft Intune
Mastering Microsoft Intune
Read more
Mar 2024 828 pages
Full star icon 4.6 (25)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Adversarial AI Attacks, Mitigations, and Defense Strategies
Adversarial AI Attacks, Mitigations, and Defense Strategies
Read more
Jul 2024 602 pages
Full star icon 4.9 (13)
eBook
eBook
  • eBook eBook $25.99
  • Paperback Paperback $39.99
$25.99 $39.99
$39.99 $49.99
CISA – Certified Information Systems Auditor Study Guide
CISA – Certified Information Systems Auditor Study Guide
Read more
Oct 2024 356 pages
Full star icon 3 (2)
eBook
eBook
  • eBook eBook $25.99
  • Paperback Paperback $39.99
$25.99 $39.99
$39.99 $49.99
Right arrow icon

Customer reviews

Top Reviews
  • Top Reviews
  • Most Recent
Rating distribution
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
(6 Ratings)
5 star 16.7%
4 star 16.7%
3 star 33.3%
2 star 16.7%
1 star 16.7%
Filter icon Filter
Top Reviews
  • Top Reviews
  • Most Recent

Filter reviews by

A. Zubarev Feb 20, 2014
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Malware is modern nightmare for any government, enterprises and even private users. No wonder a lot of resources are drained to fight it. Luckily, for budget minded there are Open Source offerings. One of the standing out of the crowd is Cuckoo, written by a Google intern in Python, it constitutes a complete platform for an efficient fight against malware and has an array of enhanced features to offer as impact analysis, reporting to monitoring authorities and issue remediation.This Packtbook is probably the only offering currently on the market that covers all the intricacies from installing and configuring Cuckoo to extending its capabilities and improving its efficiency further.The book does not require any programming knowledge nor any special or advanced IT skills, however the author uses an Ubuntu Linux and Oracle VirtualBox (both are extremely popular lately). The book remarkably dedicates alot of time though setting the whole system up, and this is for a reason - malware analysis requires a special approach, persistence and dedication.The book covers analysis of various malware types and how to attest each, plus involves secondary open source tools, so be prepared to have plenty of hard drive space and enough CPU power.Despite I did not follow all of the examples it seems that a person on a project would be more than capable to aquatint results with the product in a few days, so if your organization is starting to embrace on a major malware analysis project than look no further than getting this book.I need to state some images appear too small to be read (as most of the report pages) even on a large screen monitor in a PDF.Some day I am sure will revisit this excellent book and dedicate more time to experimenting with this remarkable, unique software, I was full of excitement and had lots of fun reading this book, hope you will, too.I am giving this book a 5 out of 5 rating, but I must admit the book is targeting newcomers to the malware fight front using Cuckoo.
Amazon Verified review Amazon
kellep charles Apr 08, 2014
Full star icon Full star icon Full star icon Full star icon Empty star icon 4
I had the opportunity to review and conduct some interesting hands-on examples from Packt Publishing’s “Cuckoo Malware Analysis” by Digit Oktavianto and Iqbal Muhardianto. This book was divided into five intuitive chapters consisting of: Preface Chapter 1: Getting Started with Automated Malware Analysis using Cuckoo Sandbox Chapter 2: Using Cuckoo Sandbox to Analyze a Sample Malware Chapter 3: Analyzing the Output of Cuckoo Sandbox Chapter 4: Reporting with Cuckoo Sandbox Chapter 5: Tips and Tricks for Cuckoo Sandbox IndexIn chapter one, titled “Getting Started with Automated Malware Analysisusing Cuckoo Sandbox” provided information pertaining to malware analysis methodologies, basic theory in Sandboxing and detailed information on installing the Cuckoo Sandbox framework. The process was not easy, but if directions are followed precisely, then outcome should be favorable. In chapter two “Using Cuckoo Sandbox to Analyze a Sample Malware”, the authors discussed the process of starting Cuckoo as well as submitting various malware samples such as MS Word, MS Excel and PDF documents. In addition, examples to submitting malicious URL, binary files and conducting memory forensics were also demonstrated.Chapter three “Analyzing the Output of Cuckoo Sandbox” and Chapter four “Reporting with Cuckoo Sandbox”, covered using the processing module and analyzing an APT attack. In addition, the process to creating a built-in reports and exporting data report analysis from Cuckoo to another format were covered.The last chapter, “Tips and Tricks for Cuckoo Sandbox” pertained informative information about hardening Cuckoo Sandbox against VM detection and other interesting tips I was not to concerned about as a novice in the craft of malware analysis.Overall, I thought the book was well written as a hybrid tool to learning the process of conducting malware analysis. Chapter one, provided the necessary foundation about malware analysis, while the remaining chapter provided detailed instructions to installing, conducting and reporting malware analysis.I found this text to be very useful and beneficial for anyone task in conducting the process of malware analysis. In addition, I this text would also provide valuable value in academia as a supplemental text or lab manual.
Amazon Verified review Amazon
Woopers Nov 17, 2015
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
Basically provides what the readthedocs page states. Not much new info.
Amazon Verified review Amazon
Manuel Leos Sep 22, 2015
Full star icon Full star icon Full star icon Empty star icon Empty star icon 3
Simple content, not much to say but is a little better than the doc, very few pages, nice for starters only
Amazon Verified review Amazon
Bidan S. Jun 04, 2016
Full star icon Full star icon Empty star icon Empty star icon Empty star icon 2
Didn't meet expectations.
Amazon Verified review Amazon

People who bought this also bought

Left arrow icon
Mastering Linux Security and Hardening
Mastering Linux Security and Hardening
Read more
Feb 2023 620 pages
Full star icon 4.6 (34)
eBook
eBook
  • eBook eBook $35.99
  • Paperback Paperback $49.99
  • Hardcover Hardcover $69.99
$35.99 $39.99
$49.99
$69.99
Cybersecurity – Attack and Defense Strategies
Cybersecurity – Attack and Defense Strategies
Read more
Sep 2022 570 pages
Full star icon 4.9 (40)
eBook
eBook
  • eBook eBook $22.09
  • Paperback Paperback $33.59
$22.09 $33.99
$33.59 $41.99
Mastering Windows Security and Hardening
Mastering Windows Security and Hardening
Read more
Aug 2022 816 pages
Full star icon 4.8 (19)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Digital Forensics and Incident Response
Digital Forensics and Incident Response
Read more
Dec 2022 532 pages
Full star icon 4.9 (14)
eBook
eBook
  • eBook eBook $39.59
  • Paperback Paperback $54.99
$39.59 $43.99
$54.99
Learn Computer Forensics
Learn Computer Forensics
Read more
Jul 2022 434 pages
Full star icon 4.9 (62)
eBook
eBook
  • eBook eBook $35.99
  • Paperback Paperback $49.99
  • Audiobook Audiobook $46.99
$35.99 $39.99
$49.99
$46.99
Right arrow icon

About the authors

Left arrow icon
Profile icon Digit Oktavianto
Digit Oktavianto
Digit Oktavianto is an IT security professional and system administrator with experience in the Linux server, network security, Security Information and Event Management (SIEM), vulnerability assesment, penetration testing, intrusion analysis, incident response and incident handling, security hardening, PCI-DSS, and system administration. He has good experience in Managed Security Services (MSS) projects, Security Operation Centre, operating and maintaining SIEM tools, configuring and setup of IDS/IPS, Firewall, Antivirus, Operating Systems, and Applications. He works as an information security analyst in Noosc Global, a security consultant firm based in Indonesia. Currently, he holds CEH and GIAC Incident Handler certifications. He is very enthusiastic and has a good passion in malware analysis as his main interest for research. This book is the first book that he has written, and he plans to write more about malware analysis and incident response books.
Read more
See other products by Digit Oktavianto
Profile icon Iqbal Muhardianto
Iqbal Muhardianto
Iqbal Muhardianto is a security enthusiast and he is working in the Ministry of Foreign Affairs of the Republic of Indonesia. He loves breaking things apart just to know how it works. In his computer learning career, he first started with learning MS-DOS and some C programming, after being a System admin, Network Admin, and now he is a IT Security Administrator with some skills in Linux, Windows, Network, SIEM, Malware Analysis, and Pentesting. He currently lives Norway and works as an IT Staff in the Indonesia Embassy in Oslo.
Read more
See other products by Iqbal Muhardianto
Right arrow icon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

What is the digital copy I get with my Print order? Chevron down icon Chevron up icon

When you buy any Print edition of our Books, you can redeem (for free) the eBook edition of the Print Book you’ve purchased. This gives you instant access to your book when you make an order via PDF, EPUB or our online Reader experience.

What is the delivery time and cost of print book? Chevron down icon Chevron up icon

Shipping Details

USA:

'

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.


Unfortunately, due to several restrictions, we are unable to ship to the following countries:

  1. Afghanistan
  2. American Samoa
  3. Belarus
  4. Brunei Darussalam
  5. Central African Republic
  6. The Democratic Republic of Congo
  7. Eritrea
  8. Guinea-bissau
  9. Iran
  10. Lebanon
  11. Libiya Arab Jamahriya
  12. Somalia
  13. Sudan
  14. Russian Federation
  15. Syrian Arab Republic
  16. Ukraine
  17. Venezuela
What is custom duty/charge? Chevron down icon Chevron up icon

Customs duty are charges levied on goods when they cross international borders. It is a tax that is imposed on imported goods. These duties are charged by special authorities and bodies created by local governments and are meant to protect local industries, economies, and businesses.

Do I have to pay customs charges for the print book order? Chevron down icon Chevron up icon

The orders shipped to the countries that are listed under EU27 will not bear custom charges. They are paid by Packt as part of the order.

List of EU27 countries: www.gov.uk/eu-eea:

A custom duty or localized taxes may be applicable on the shipment and would be charged by the recipient country outside of the EU27 which should be paid by the customer and these duties are not included in the shipping charges been charged on the order.

How do I know my custom duty charges? Chevron down icon Chevron up icon

The amount of duty payable varies greatly depending on the imported goods, the country of origin and several other factors like the total invoice amount or dimensions like weight, and other such criteria applicable in your country.

For example:

  • If you live in Mexico, and the declared value of your ordered items is over $ 50, for you to receive a package, you will have to pay additional import tax of 19% which will be $ 9.50 to the courier service.
  • Whereas if you live in Turkey, and the declared value of your ordered items is over € 22, for you to receive a package, you will have to pay additional import tax of 18% which will be € 3.96 to the courier service.
How can I cancel my order? Chevron down icon Chevron up icon

Cancellation Policy for Published Printed Books:

You can cancel any order within 1 hour of placing the order. Simply contact customercare@packt.com with your order details or payment transaction id. If your order has already started the shipment process, we will do our best to stop it. However, if it is already on the way to you then when you receive it, you can contact us at customercare@packt.com using the returns and refund process.

Please understand that Packt Publishing cannot provide refunds or cancel any order except for the cases described in our Return Policy (i.e. Packt Publishing agrees to replace your printed book because it arrives damaged or material defect in book), Packt Publishing will not accept returns.

What is your returns and refunds policy? Chevron down icon Chevron up icon

Return Policy:

We want you to be happy with your purchase from Packtpub.com. We will not hassle you with returning print books to us. If the print book you receive from us is incorrect, damaged, doesn't work or is unacceptably late, please contact Customer Relations Team on customercare@packt.com with the order number and issue details as explained below:

  1. If you ordered (eBook, Video or Print Book) incorrectly or accidentally, please contact Customer Relations Team on customercare@packt.com within one hour of placing the order and we will replace/refund you the item cost.
  2. Sadly, if your eBook or Video file is faulty or a fault occurs during the eBook or Video being made available to you, i.e. during download then you should contact Customer Relations Team within 14 days of purchase on customercare@packt.com who will be able to resolve this issue for you.
  3. You will have a choice of replacement or refund of the problem items.(damaged, defective or incorrect)
  4. Once Customer Care Team confirms that you will be refunded, you should receive the refund within 10 to 12 working days.
  5. If you are only requesting a refund of one book from a multiple order, then we will refund you the appropriate single item.
  6. Where the items were shipped under a free shipping offer, there will be no shipping costs to refund.

On the off chance your printed book arrives damaged, with book material defect, contact our Customer Relation Team on customercare@packt.com within 14 days of receipt of the book with appropriate evidence of damage and we will work with you to secure a replacement copy, if necessary. Please note that each printed book you order from us is individually made by Packt's professional book-printing partner which is on a print-on-demand basis.

What tax is charged? Chevron down icon Chevron up icon

Currently, no tax is charged on the purchase of any print book (subject to change based on the laws and regulations). A localized VAT fee is charged only to our European and UK customers on eBooks, Video and subscriptions that they buy. GST is charged to Indian customers for eBooks and video purchases.

What payment methods can I use? Chevron down icon Chevron up icon

You can pay with the following card types:

  1. Visa Debit
  2. Visa Credit
  3. MasterCard
  4. PayPal
What is the delivery time and cost of print books? Chevron down icon Chevron up icon

Shipping Details

USA:

'

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.


Unfortunately, due to several restrictions, we are unable to ship to the following countries:

  1. Afghanistan
  2. American Samoa
  3. Belarus
  4. Brunei Darussalam
  5. Central African Republic
  6. The Democratic Republic of Congo
  7. Eritrea
  8. Guinea-bissau
  9. Iran
  10. Lebanon
  11. Libiya Arab Jamahriya
  12. Somalia
  13. Sudan
  14. Russian Federation
  15. Syrian Arab Republic
  16. Ukraine
  17. Venezuela
Modal Close icon
Modal Close icon