Koodous

Check Android app samples (APK) against Koodous API.

Forensics & Malware Analysis · Koodous

Details

ID	`Koodous`
Provider	VirusTotal
Category	Forensics & Malware Analysis
From Version	5.0.0
Supported Modules	Agentix XSIAM

README

Check Android app samples (APK) against Koodous API.

Configure Koodous in Cortex

Parameter	Required
Server URL	False
API Key	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

k-check-hash

Check APK sample.

Base Command

k-check-hash

Input

Argument Name	Description	Required
hash	The hash of the sample (MD5, SHA1 or SHA256).	Required

Configuration parameters

ServerURL — Server URL
APIKey — API Key
apikey_creds —

Commands (1)

k-check-hash
Check APK sample.

Source

Koodous.js Koodous.yml

Download History Raw

var request = function(method, path, parameters){
    var headers = {'Content-Type': ['application/json']};
    var apiKey = params.apikey_creds ? params.apikey_creds.password : params.APIKey
    if (apiKey){
        headers['Authorization'] = "Token " + apiKey;
    }

    var result = http(
        params.serverURL + path + parameters.hash,
        {
            Headers: headers,
            Method: method,
        }
    );

    if (result.StatusCode !== 200) {
        throw 'Failed to perform request ' + path + ', request status code: ' + result.StatusCode;
    }
    return result.Body;
};
switch (command) {
    case 'test-module':
        return 'ok';
    case 'k-check-hash':
        return request('GET', 'apks?search=', args);
    default:
}