Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MD5 hash of the samples changes in the report file. #481

Open
masifpak opened this issue Aug 22, 2017 · 0 comments
Open

MD5 hash of the samples changes in the report file. #481

masifpak opened this issue Aug 22, 2017 · 0 comments

Comments

@masifpak
Copy link

masifpak commented Aug 22, 2017

Hi,

I have submitted the file to the cuckoo, the name of the file was its md5 hash. when I see the report of specific task on django dashboard it is same as the name of the file as well as it stored in sample table of cuckoo database.
But when I searched the same md5 hash in its json report it only shows it in the name that is target.file.name but I was expecting that the md5 hash at target.file.md5 but its different.

example:

  1. The file name was 79be5bbda1bff8a3464d81780b829899.

  2. The MD5 hash on the dashboard and database remain same as 79be5bbda1bff8a3464d81780b829899`

  3. But the md5 hash in the json file at the target.file.md5 key was changed to 3c0e1d478d31aebd5ed77195a0de0bbd .

And if I just change the name of the file it changes the md5 hash in the report as well that is terrible.

What's the problem how cuckoo is calculating the hash ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant