URL Details

URL
http://khrcybapbqly.com/

Score

This url appears fairly benign with a score of 0.6 out of 10.

Please notice: The scoring system is currently still in development and should be considered an alpha feature.

Information on Execution

Category Started Completed Duration Logs
URL March 6, 2019, 5:11 a.m. March 6, 2019, 5:13 a.m. 121 seconds

Machine

Name Label Started On Shutdown On
win7x32 win7x32 2019-03-06 05:11:06 2019-03-06 05:13:06

Analyzer Log

2019-03-05 21:11:06,140 [analyzer] DEBUG: Starting analyzer from: C:\hnlmqbuprk
2019-03-05 21:11:06,140 [analyzer] DEBUG: Pipe server name: \\.\PIPE\dNIIOVzQtdYTwcXgDeKcaIDbN
2019-03-05 21:11:06,140 [analyzer] DEBUG: Log pipe server name: \\.\PIPE\aABNYJLUEjJjDwWUHzwfXOCNTMF
2019-03-05 21:11:10,148 [analyzer] DEBUG: Started auxiliary module Disguise
2019-03-05 21:11:10,414 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2019-03-05 21:11:10,414 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2019-03-05 21:11:10,476 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit ncrypt.dll (with timestamp 0x586e85bb)
2019-03-05 21:11:10,476 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit ncrypt.dll (with timestamp 0x586e85bb)
2019-03-05 21:11:10,476 [analyzer] DEBUG: Loaded monitor into process with pid 476
2019-03-05 21:11:10,476 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2019-03-05 21:11:10,492 [analyzer] DEBUG: Started auxiliary module Human
2019-03-05 21:11:10,492 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2019-03-05 21:11:10,492 [analyzer] DEBUG: Started auxiliary module Reboot
2019-03-05 21:11:10,664 [analyzer] DEBUG: Started auxiliary module RecentFiles
2019-03-05 21:11:10,664 [analyzer] DEBUG: Started auxiliary module Screenshots
2019-03-05 21:11:12,427 [lib.api.process] INFO: Successfully executed process from path 'C:\\Program Files\\Microsoft Office\\Office12\\POWERPNT.EXE' with arguments ['/S', 'http://khrcybapbqly.com/'] and pid 2864
2019-03-05 21:11:15,453 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2019-03-05 21:11:15,453 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2019-03-05 21:11:15,530 [analyzer] DEBUG: Loaded monitor into process with pid 2864
2019-03-05 21:11:16,904 [analyzer] INFO: Added new file to list with pid 2864 and path C:\Users\admin\AppData\Local\Temp\119652.od
2019-03-05 21:11:41,177 [analyzer] INFO: Added new file to list with pid 2864 and path \Device\NamedPipe\DAV RPC SERVICE
2019-03-05 21:12:54,388 [modules.auxiliary.human] INFO: Found button "OK", clicking it
2019-03-05 21:12:55,464 [analyzer] INFO: Added new file to list with pid 2864 and path C:\Users\admin\AppData\Roaming\Microsoft\Office\PowerP12.pip
2019-03-05 21:12:56,151 [analyzer] INFO: Process with pid 2864 has terminated
2019-03-05 21:12:56,151 [analyzer] INFO: Process list is empty, terminating analysis.
2019-03-05 21:12:57,164 [analyzer] INFO: Terminating remaining processes before shutdown.
2019-03-05 21:12:57,164 [analyzer] WARNING: File at path "u'\\device\\namedpipe\\dav rpc service'" does not exist, skip.
2019-03-05 21:12:57,164 [analyzer] WARNING: File at path "u'c:\\users\\admin\\appdata\\local\\temp\\119652.od'" does not exist, skip.
2019-03-05 21:12:57,164 [analyzer] INFO: Analysis completed.

Cuckoo Log

2019-03-06 05:11:06,620 [lib.cuckoo.core.scheduler] INFO: Task #1368: acquired machine win7x32 (label=win7x32)
2019-03-06 05:11:06,765 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 1582 (interface=eth2, host=192.168.128.112, pcap=/opt/cuckoo/storage/analyses/1368/dump.pcap)
2019-03-06 05:11:10,411 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=win7x32, ip=192.168.128.112)
2019-03-06 05:13:05,584 [lib.cuckoo.core.guest] INFO: win7x32: analysis completed successfully
2019-03-06 05:14:25,106 [lib.cuckoo.core.plugins] WARNING: The processing module "Suricata" returned the following error: Unable to locate Suricata binary
2019-03-06 05:14:31,542 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937e5b1490>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-06 05:14:31,543 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937e5b1a90>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-06 05:14:31,544 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937e5b1150>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-06 05:14:31,545 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937e5b1ad0>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-06 05:14:31,545 [lib.cuckoo.core.plugins] ERROR: Failed to run the reporting module "ElasticSearch":
Traceback (most recent call last):
  File "/opt/cuckoo/lib/cuckoo/core/plugins.py", line 533, in process
    current.run(self.results)
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 196, in run
    self.connect()
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 79, in connect
    if not self.es.indices.exists_template("cuckoo_template"):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/utils.py", line 69, in _wrapped
    return func(*args, params=params, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/indices.py", line 491, in exists_template
    name), params=params)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/transport.py", line 327, in perform_request
    status, headers, data = connection.perform_request(method, url, params, body, ignore=ignore, timeout=timeout)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 105, in perform_request
    raise ConnectionError('N/A', str(e), e)
ConnectionError: ConnectionError(<urllib3.connection.HTTPConnection object at 0x7f937e5b1ad0>: Failed to establish a new connection: [Errno 111] Connection refused) caused by: NewConnectionError(<urllib3.connection.HTTPConnection object at 0x7f937e5b1ad0>: Failed to establish a new connection: [Errno 111] Connection refused)

Signatures

Libraries known to be associated with a CVE were requested (may be False Positive) (1 event)
cve CVE-2013-3906

Network

DNS

Name Response Post-Analysis Lookup
khrcybapbqly.com
dns.msftncsi.com

Hosts

No hosts contacted.

Summary

Process POWERPNT.EXE (2864)

  • Opened files

    • C:\Windows\System32\imageres.dll
    • C:\Windows\AppPatch\sysmain.sdb
    • C:\
    • C:\Users\admin\AppData\Local\Temp\CVRD345.tmp.cvr
    • C:\Users\admin\AppData\Local\Temp\CVRD345.tmp
    • C:\Windows\System32\en-US\tzres.dll.mui
    • C:\Windows\System32\en-US\USER32.dll.mui
    • C:\Windows\System32\spool\drivers\w32x86\3\msonpui.dll
    • C:\Users\admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000002.db
    • C:\Program Files\Microsoft Office\Office12\ID_00030.DPC
    • \\?\PIPE\DAV RPC SERVICE
    • C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat
    • C:\Windows\System32\en-US\MSCTF.dll.mui
    • C:\Program Files\Microsoft Office\Office12\POWERPOI.PIP
    • C:\ProgramData\Microsoft\OFFICE\DATA\OPA12.BAK
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Cultures\OFFICE.ODF
    • C:\Windows\System32\spool\drivers\w32x86\3\msonpdrv.dll
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\RICHED20.DLL
    • C:\Windows\WindowsShell.Manifest
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSO.DLL
    • C:\Users
    • C:\Windows\System32\oleacc.dll
    • C:\Windows\System32
    • C:\Windows\System32\tzres.dll
    • C:\Program Files\Common Files\Microsoft Shared\
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\OGL.DLL
    • C:\Windows\System32\shell32.dll
    • C:\ProgramData\Microsoft\OFFICE\DATA\opa12.dat
    • C:\Users\desktop.ini
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\
    • C:\Windows\System32\en-US\KERNELBASE.dll.mui
    • C:\Windows\System32\davhlpr.dll
    • \device\webdavredirector
    • C:\Program Files\
    • C:\Windows\Microsoft.NET\Framework\v2.0.50727\
    • C:\Program Files\Common Files\System\ado\msadox.dll
    • C:\Users\admin\Desktop\desktop.ini
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\1033\ALRTINTL.DLL
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE11\msxml5.dll
    • C:\Windows\Fonts\staticcache.dat
    • C:\Windows\System32\en-US\imageres.dll.mui
    • \??\FDC#GENERIC_FLOPPY_DRIVE#6&3b4c39bd&0&0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
    • C:\Windows\System32\rsaenh.dll
    • C:\Users\admin\AppData\Local\Temp\119652.od
    • C:\Windows\System32\en-US\MPR.dll.mui
    • C:\Users\admin
    • C:\Users\admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
    • C:\Windows\System32\uxtheme.dll
  • Written files

    • C:\Users\admin\AppData\Roaming\Microsoft\Office\PowerP12.pip
    • \\?\PIPE\DAV RPC SERVICE
    • C:\Users\admin\AppData\Local\Temp\119652.od

Process POWERPNT.EXE (2864)

Process POWERPNT.EXE (2864)

Process POWERPNT.EXE (2864)

Process POWERPNT.EXE (2864)

  • DLLs Loaded

    • API-MS-Win-Security-LSALookup-L1-1-0.dll
    • C:\Windows\system32\spool\DRIVERS\W32X86\3\msonpui.dll
    • C:\Windows\system32\spool\DRIVERS\W32X86\3\msonpdrv.dll
    • UxTheme.dll
    • C:\Windows\system32\ole32.dll
    • dwmapi.dll
    • MPR.DLL
    • api-ms-win-downlevel-advapi32-l2-1-0.dll
    • API-MS-WIN-Service-Management-L2-1-0.dll
    • C:\Windows\system32\MSCTF.dll
    • UxTheme.DLL
    • API-MS-WIN-Service-winsvc-L1-1-0.dll
    • comctl32
    • ole32.dll
    • SHLWAPI.dll
    • USER32.dll
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\OGL.DLL
    • VERSION.DLL
    • C:\Windows\system32\ADVAPI32.DLL
    • WININET.DLL
    • WTSAPI32.DLL
    • C:\Windows\System32\mswsock.dll
    • SHELL32.dll
    • DNSAPI.dll
    • C:\Windows\System32\wship6.dll
    • WINMM.dll
    • HLINK.DLL
    • dhcpcsvc6.DLL
    • rpcrt4.dll
    • C:\Windows\System32\wshtcpip.dll
    • IMM32.dll
    • C:\Windows\System32\drprov.dll
    • urlmon.dll
    • WINSTA.dll
    • CRYPTBASE.dll
    • Netapi32.DLL
    • C:\Windows\system32\apphelp.dll
    • URLMON.DLL
    • api-ms-win-downlevel-ole32-l1-1-0.dll
    • Comctl32.dll
    • IPHLPAPI.DLL
    • winspool.drv
    • profapi.dll
    • dhcpcsvc.DLL
    • comctl32.dll
    • C:\Windows\System32\davclnt.dll
    • C:\Program Files\Microsoft Office\Office12\1033\PPINTL.DLL
    • RpcRtRemote.dll
    • Winspool.DRV
    • C:\Program Files\Common Files\Microsoft Shared\office12\riched20.dll
    • C:\Windows\system32\rsaenh.dll
    • Shlwapi.DLL
    • CRYPTSP.dll
    • WinInet.dll
    • netutils.dll
    • C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSORES.DLL
    • mso.dll
    • C:\Windows\system32\KERNEL32.DLL
    • api-ms-win-downlevel-shlwapi-l2-1-0.dll
    • ADVAPI32.dll
    • SETUPAPI.dll
    • WS2_32.dll
    • C:\Program Files\Common Files\Microsoft Shared\office12\1033\MSOINTL.DLL
    • winhttp.dll
    • ntmarta.dll
    • C:\Windows\system32\mscoree.dll
    • C:\Windows\system32\Msimtf.dll
    • API-MS-WIN-Service-Management-L1-1-0.dll
    • VERSION.dll
    • rasadhlp.dll
    • C:\Windows\System32\ntlanman.dll
    • KERNEL32.DLL
    • Secur32.dll
    • OLEAUT32.DLL
    • DwmApi.DLL
    • API-MS-Win-Security-SDDL-L1-1-0.dll
    • C:\Program Files\Common Files\Microsoft Shared\office12\mso.dll
    • MSO.dll
    • DWMAPI.DLL
    • Kernel32.DLL
    • OLEAUT32.dll
    • RPCRT4.dll
    • SHLWAPI.DLL
    • C:\Windows\system32\oleaut32.dll
    • C:\Windows\system32\mswsock.dll
    • SHELL32.DLL
    • Shlwapi.dll
No static analysis available.
No antivirus signatures available.

Process Tree


POWERPNT.EXE, PID: 2864, Parent PID: 2840

default registry file network process services synchronisation iexplore office pdf

Deprecation note: While processing this analysis you did not have the httpreplay Python library installed. Installing this library (i.e., pip install httpreplay) will allow Cuckoo to do more proper PCAP analysis including but not limited to showing full HTTP and HTTPS (!) requests and responses. It is recommended that you install this library and possibly reprocess any interesting analysis tasks.

Hosts

No hosts contacted.

DNS

Name Response Post-Analysis Lookup
khrcybapbqly.com
dns.msftncsi.com

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.128.112 49208 192.168.128.111 53
192.168.128.112 49254 192.168.128.111 53
192.168.128.112 50804 192.168.128.111 53
192.168.128.112 51778 192.168.128.111 53
192.168.128.112 53921 192.168.128.111 53
192.168.128.112 56984 192.168.128.111 53
192.168.128.112 58297 192.168.128.111 53
192.168.128.112 62873 192.168.128.111 53
192.168.128.112 138 192.168.128.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Name d03c352b5ebc63ec_powerp12.pip
Filepath C:\Users\admin\AppData\Roaming\Microsoft\Office\PowerP12.pip
Size 1.4KB
Processes 2864 (POWERPNT.EXE)
Type data
MD5 d3494e886f9bcf52c1b6022ba44990a3
SHA1 426e33e438823f8d5b77084709f2f71d3caaa837
SHA256 d03c352b5ebc63ec82e158e22a7deae9a4282155726568eec3767c9deb072108
CRC32 386F9654
ssdeep 24:IzSV1glbWa1UqylJZzwA6K2vmmXIEueSA7FfjSeMemiefs8RPZzXB+6Gto1rYd+X:IzSV1Ht7FlDzmXNA5iefsQBLB+Fo1rYe
Yara None matched
VirusTotal Search for analysis
Sorry! No dropped buffers.
Task ID 1368
Mongo ID 5c7f9d8811d30812ab7205ba
Cuckoo release 2.0-dev