
Cuckoo Malware Analysis

If you have not installed Volatility yet, carry out the following steps:
You can use this command to install the latest version of Volatility on your system:
$ svn checkout http://volatility.googlecode.com/svn/trunk/volatility-read-only $ cd volatility-read-only $ python setup.py build $ sudo python setup.py install
To make things easier, you can make a shortcut alias command for Volatility by editing your .bashrc
file:
$ nano ~/.bashrc
Go to the end of line, and add this command:
$ alias vol.py="/home/user/Download/Volatility-read-only/vol.py
Save and Exit.
Please notice that /home/user/Download/Volatility-read-only/vol.py
is the Volatility directory in your system.
You can replace the line based on your Volatility folder in your system. Now, you can run Volatility by just typing this command in the terminal:
$ vol.py
Before continuing to analyze APT1 malware sample, you have to change some default configuration in your Cuckoo...
Change the font size
Change margin width
Change background colour