How to Install Cuckoo Sandbox? [Step1]

Install All Packages dependencies and libraries

Step1: update

$ sudo apt-get update 

Step2: Install the dependencies and libraries

$ sudo apt-get install -y python python-pip python-dev python-sqlalchemy python-dpkt python-jinja2 python-magic python-pymongo python-libvirt subversion git build-essential git libpcre3 libpcre3-dev libpcre++-dev python-bottle libffi-dev libssl-dev libxml2-dev libxslt-dev libxslt1-dev libjpeg-dev libfuzzy-dev ssdeep  autoconf automake libtool make gcc 

Step3: Upgrade pip-9.0.1-py2.py3-none-any.whlc

$ sudo pip install --upgrade pip

$ sudo pip install -U pip setuptools

Step4: Install Pefile Python Modulec

$ wget https://github.com/erocarrera/pefile/files/192316/pefile-2016.3.28.tar.gz

$ tar zxvf pefile-2016.3.28.tar.gz

$ cd pefile-2016.3.28/

$ sudo python setup.py build

$ sudo python setup.py install

$ cd ..

Step5: Install pydeept Python Module

$ git clone https://github.com/kbandla/pydeep.git pydeep

$ cd pydeep

$ sudo python setup.py build

$ sudo python setup.py install

$ cd ..

Step6: Install jasson-2.10

$ wget http://www.digip.org/jansson/releases/jansson-2.10.tar.gz

$ tar zxvf jansson-2.10.tar.gz

$ cd jansson-2.10/

$ ./configure

$ make

$ sudo make install

$ cd ..

Step7: Install swing-3.0.12

$ wget http://downloads.sourceforge.net/swig/swig-3.0.12.tar.gz

$ tar zxvf swig-3.0.12.tar.gz

$ cd swig-3.0.12/

$ ./configure

$ make

$ sudo make install

$ cd ..

Step8: Install M2Crypto==0.24.0

$ wget https://pypi.python.org/packages/58/75/362faac80a1bc2742b4b696dc350518312043d568bfd2687a9270f18da88/M2Crypto-0.24.0.tar.gz#md5=8e87235942c76d1ba9f999ee33764fdb

$ tar zxvf M2Crypto-0.24.0.tar.gz

$ cd M2Crypto-0.24.0/

$ sudo python setup.py build

$ sudo python setup.py install

$ cd ..

Step9: \Install YARA 3.5

$ sudo apt-get install -y flex bison

$ wget https://github.com/VirusTotal/yara/archive/v3.5.0.tar.gz

$ tar xvfz v3.5.0.tar.gz

$ cd yara-3.5.0/

$ ./bootstrap.sh

$ ./configure --enable-cuckoo --enable-magic

$ make

$ sudo make install

Step10: Install Tcpdump

$ sudo apt-get -y install tcpdump libpcap-dev

$ sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump

$ getcap /usr/sbin/tcpdump

Step11:  "Create ip_tables.sh"

$ echo '#!/bin/bash' >update_ip_tables.sh

$ echo 'iptables -A FORWARD -o eth0 -i vboxnet0 -s 192.168.56.0/24 -m conntrack --ctstate NEW -j ACCEPT' >> update_ip_tables.sh

$ echo 'iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> update_ip_tables.sh

$ echo 'iptables -A POSTROUTING -t nat -j MASQUERADE' >> update_ip_tables.sh

$ echo 'sysctl -w net.ipv4.ip_forward=1' >> update_ip_tables.sh

$ chmod +x ./update_ip_tables.sh

$ sudo ./update_ip_tables.sh

Step12:  "Install Dnsmasq"

$ sudo apt-get install -y dnsmasq

$ sudo service dnsmasq start

Step13: "Install volatility、MongoDB、tesseract-oct"

$ sudo apt-get install -y volatility mongodb tesseract-ocr

Step 14: "Install Cuckoo Sandbox"

$ git clone https://github.com/cuckoosandbox/cuckoo

Step 15:  "Install Cuckoo Sandbox requirement modules"

$ cd cuckoo/

$ sudo -H pip install -r requirements.txt

Step16: "Install Cuckoo Sandbox utilitys"

$ cd utils/

$ ./community.py -a -f -w

Step17:  "Install Install Oracle VM VirtualBox"

$ sudo sh -c 'echo "deb http://download.virtualbox.org/virtualbox/debian xenial contrib" >> /etc/apt/sources.list.d/virtualbox.list'

$ wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -

$ wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | sudo apt-key add -

$ sudo apt update && sudo apt-get -y install virtualbox-5.1

Step18: "Install Install Oracle VM VirtualBox Extension Pack"

$ wget http://download.virtualbox.org/virtualbox/5.1.18/Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack

$ VBoxManage extpack install Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack

Step19 : "Add cuckoo to Vboxusers Grops"

$ sudo usermod -aG vboxusers cuckoo

========================================================================

install.sh

#!/bin/bash

mkdir install_tmp

cd install_tmp/

echo "====================================="

echo "Ubuntu Packages Update"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get update 

echo "====================================="

echo "Install the dependencies and libraries"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get install -y python python-pip python-dev python-sqlalchemy python-dpkt python-jinja2 python-magic python-pymongo python-libvirt subversion git build-essential git libpcre3 libpcre3-dev libpcre++-dev python-bottle libffi-dev libssl-dev libxml2-dev libxslt-dev libxslt1-dev libjpeg-dev libfuzzy-dev ssdeep  autoconf automake libtool make gcc 

echo ""

echo ""

echo "====================================="

echo "Upgrade pip-9.0.1-py2.py3-none-any.whlc"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo pip install --upgrade pip

sudo pip install -U pip setuptools

echo ""

echo ""

echo "====================================="

echo "Install Pefile Python Module"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

wget https://github.com/erocarrera/pefile/files/192316/pefile-2016.3.28.tar.gz

tar zxvf pefile-2016.3.28.tar.gz

cd pefile-2016.3.28/

sudo python setup.py build

sudo python setup.py install

cd ..

echo ""

echo ""

echo "====================================="

echo "Install pydeept Python Module"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

git clone https://github.com/kbandla/pydeep.git pydeep

cd pydeep

sudo python setup.py build

sudo python setup.py install

cd ..

echo ""

echo ""

echo "====================================="

echo "Install jasson-2.10"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

wget http://www.digip.org/jansson/releases/jansson-2.10.tar.gz

tar zxvf jansson-2.10.tar.gz

cd jansson-2.10/

./configure

make

sudo make install

cd ..

echo ""

echo ""

echo "====================================="

echo "Install swing-3.0.12"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

wget http://downloads.sourceforge.net/swig/swig-3.0.12.tar.gz

tar zxvf swig-3.0.12.tar.gz

cd swig-3.0.12/

./configure

make

sudo make install

cd ..

echo ""

echo ""

echo "====================================="

echo "Install M2Crypto==0.24.0"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

wget https://pypi.python.org/packages/58/75/362faac80a1bc2742b4b696dc350518312043d568bfd2687a9270f18da88/M2Crypto-0.24.0.tar.gz#md5=8e87235942c76d1ba9f999ee33764fdb

tar zxvf M2Crypto-0.24.0.tar.gz

cd M2Crypto-0.24.0/

sudo python setup.py build

sudo python setup.py install

cd ..

echo ""

echo ""

echo "====================================="

echo "Install YARA 3.5"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get install -y flex bison

wget https://github.com/VirusTotal/yara/archive/v3.5.0.tar.gz

tar xvfz v3.5.0.tar.gz

cd yara-3.5.0/

./bootstrap.sh

./configure --enable-cuckoo --enable-magic

make

sudo make install

cd ~

echo ""

echo ""

echo "====================================="

echo "Install Tcpdump"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get -y install tcpdump libpcap-dev

sudo setcap cap_net_raw,cap_net_admin=eip /usr/sbin/tcpdump

getcap /usr/sbin/tcpdump

echo ""

echo ""

echo "====================================="

echo "Create ip_tables.sh"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

echo '#!/bin/bash' >update_ip_tables.sh

echo 'iptables -A FORWARD -o eth0 -i vboxnet0 -s 192.168.56.0/24 -m conntrack --ctstate NEW -j ACCEPT' >> update_ip_tables.sh

echo 'iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' >> update_ip_tables.sh

echo 'iptables -A POSTROUTING -t nat -j MASQUERADE' >> update_ip_tables.sh

echo 'sysctl -w net.ipv4.ip_forward=1' >> update_ip_tables.sh

chmod +x ./update_ip_tables.sh

sudo ./update_ip_tables.sh

echo ""

echo ""

echo "====================================="

echo "Install Dnsmasq"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get install -y dnsmasq

sudo service dnsmasq start

echo ""

echo ""

echo "====================================="

echo "Install volatility,MongoDB,tesseract-oct"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo apt-get install -y volatility mongodb tesseract-ocr

echo ""

echo ""

echo "====================================="

echo "Install Cuckoo Sandbox"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

git clone https://github.com/cuckoosandbox/cuckoo

echo ""

echo ""

echo "====================================="

echo "Install Cuckoo Sandbox requirement modules"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

cd cuckoo/

sudo -H pip install -r requirements.txt

echo ""

echo ""

echo "====================================="

echo "Install Cuckoo Sandbox utilitys"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

cd utils/

./community.py -a -f -w

echo ""

echo ""

echo "Cuckoo Sandbox Installed!"

cd ~

cd install_tmp/

echo ""

echo ""

echo "====================================="

echo "Install Install Oracle VM VirtualBox"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo sh -c 'echo "deb http://download.virtualbox.org/virtualbox/debian xenial contrib" >> /etc/apt/sources.list.d/virtualbox.list'

wget -q https://www.virtualbox.org/download/oracle_vbox_2016.asc -O- | sudo apt-key add -

wget -q https://www.virtualbox.org/download/oracle_vbox.asc -O- | sudo apt-key add -

sudo apt update && sudo apt-get -y install virtualbox-5.1

echo ""

echo ""

echo "====================================="

echo "Install Install Oracle VM VirtualBox Extension Pack"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

wget http://download.virtualbox.org/virtualbox/5.1.18/Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack

VBoxManage extpack install Oracle_VM_VirtualBox_Extension_Pack-5.1.18-114002.vbox-extpack

cd ~

echo ""

echo ""

echo "====================================="

echo "Add cuckoo to Vboxusers Grops"

echo "====================================="

read -rsp $'Press [Enter] key to continue....\n'

sudo usermod -aG vboxusers cuckoo

echo ""

echo ""

echo "==========================================="

echo "                Finished!!                 "

echo "==========================================="

sudo rm -fr install_tmp/