question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

VirusTotal Connector error

See original GitHub issue

Please replace every line in curly brackets { like this } with an appropriate answer, and remove this line.

Description

When trying to enrich a artefact, VirusTotal report the following error every time Screenshot 2021-07-05 at 6 55 12 PM

When I access to the log, it shows the following error ERROR:root:Error in message processing, reporting error to API Traceback (most recent call last): File "/usr/local/lib/python3.9/site-packages/pycti/connector/opencti_connector_helper.py", line 152, in _data_handler message = self.callback(json_data["event"]) File "/opt/opencti-connector-virustotal/virustotal.py", line 116, in _process_message return self._process_file(observable) File "/opt/opencti-connector-virustotal/virustotal.py", line 71, in _process_file if observable["name"] is None and len(attributes["names"]) > 0: KeyError: 'name' INFO:root:Reporting work update_received opencti-work--c2b1ef93-8b44-4915-b418-f759ee262f53 INFO:root:Message (delivery_tag=1) processed, thread terminated

Environment

  1. AWS ubuntu-bionic-18.04-amd64-server
  2. OpenCTI Version 4.5.5
  3. OpenCTI client: frontend
  4. Other environment details: VirusTotal connector version : opencti/connector-virustotal:latest

Reproducible Steps

Steps to create the smallest reproducible scenario:

Expected Output

Successfully extract information from VirusTotal

Actual Output

Error occurred as mentioned above.

Additional information

{ Any additional information, including logs or screenshots if you have any. }

Issue Analytics

  • State:closed
  • Created 2 years ago
  • Comments:5 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
realzacharychengcommented, Aug 12, 2021

Hi @nor3th I exported the file, please help checking if this is correct and able to help you reproducing the error. Thank you so much. mimikatz.txt

0reactions
nor3thcommented, Aug 8, 2021

Could you please share the SDO/SCO as a STIX2 file? That would help me when trying to reproduce the error. Thanks!

Read more comments on GitHub >

github_iconTop Results From Across the Web

Why am I receiving this Virustotal TA Error? - Splunk Community
The error you got would indicate that there may be a connectivity issue (maybe a firewall?) preventing the TA from connecting to the...
Read more >
Virus Total URL Enrichment API Error · Issue #4082 - GitHub
Describe the bug. API error when attempting to use URL enrichment playbooks -URL Enrichment - Virus Total domain report
Read more >
Errors - VirusTotal
HTTP Code Error code Description 400 InvalidArgumentError Some of the provided arguments are incorrect. 400 UnselectiveContentQueryError Content search query is not selective enough. 400 UnsupportedContentQueryError Unsupported...
Read more >
Why is VirusTotal returning this error? - Stack Overflow
Figured it out, after assistance from VirusTotal themselves (kudos, Karl). The problem was how PHP 5.6 changed cURL. If you are on PHP...
Read more >
Testing Virus Total connectivity from the command line on ...
How do you know if Virus Total is connecting correctly? Is there a way to test connectivity via command line?
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found