Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug][URLhaus_2_0] - Empty summary for positive results #1210

Open
0xFustang opened this issue Aug 6, 2023 · 0 comments
Open

[Bug][URLhaus_2_0] - Empty summary for positive results #1210

0xFustang opened this issue Aug 6, 2023 · 0 comments

Comments

@0xFustang
Copy link

Describe the bug

When using analyzer URLhaus_2_0 I get an empty summary ( "summary": {},) when having positive results.

To Reproduce

Search for any existing entry from URLHaus

Expected behavior

Having signatures of threat displayed as like #431 (comment)

Complementary information

Report example:

{
  "summary": {},
  "full": {
    "query_status": "ok",
    "id": "2700402",
    "urlhaus_reference": "https://urlhaus.abuse.ch/url/2700402/",
    "url": "http://117.219.119.158:47083/i",
    "url_status": "online",
    "host": "117.219.119.158",
    "date_added": "2023-08-06 11:29:05 UTC",
    "last_online": null,
    "threat": "malware_download",
    "blacklists": {
      "spamhaus_dbl": "not listed",
      "surbl": "not listed"
    },
    "reporter": "geenensp",
    "larted": "true",
    "takedown_time_seconds": null,
    "tags": [
      "32-bit",
      "elf",
      "mips",
      "Mozi"
    ],

Work environment

  • Cortex version: latest stable
  • Cortex Analyzer/Responder name: URLhaus_2_0
  • Cortex Analyzer/Responder version: 2.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant