Example #1
0
    def mark_config(self, config):
        """Mark configuration from this malware family."""
        url = config.get("url", [])
        if isinstance(url, basestring):
            url = [url]

        cnc = config.get("cnc", [])
        if isinstance(cnc, basestring):
            cnc = [cnc]

        if "family" not in config:
            raise CuckooCriticalError("Invalid call to mark_config().")

        self.marks.append({
            "type": "config",
            "config": {
                "family": config["family"],
                "url": url,
                "cnc": cnc,
                "key": config.get("key"),
                "type": config.get("type"),
            },
        })
Example #2
0
    def mark_config(self, config):
        """Mark configuration from this malware family."""
        url = config.get("url", [])
        if isinstance(url, basestring):
            url = [url]

        cnc = config.get("cnc", [])
        if isinstance(cnc, basestring):
            cnc = [cnc]

        if "family" not in config:
            raise CuckooCriticalError("Invalid call to mark_config().")

        self.marks.append({
            "type": "config",
            "config": {
                "family": config["family"],
                "url": url,
                "cnc": cnc,
                "key": config.get("key"),
                "type": config.get("type"),
            },
        })