Skip to content

unzip issue: Zipjail Error #233

Description

@overcuriousity

Whenever i upload a zip (or 7z) file, it throws an error:
svc-cuckoo3@cuckoo3:~$ sudo grep -r "7zfile\|zipjail\|unpack" /home/cuckoo/.cuckoocwd/log/ | tail -10 /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:07:04 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-3A3300 identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x7348aab2b17b sp=0x7ffe730d5018 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 3820\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-3A3300 /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:07:04 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-P711XH identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x745b3472b17b sp=0x7fff01da5a98 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 3823\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-P711XH /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:07:09 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-0CN38F identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x750c8312b17b sp=0x7fffcb812358 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 3830\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-0CN38F /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:07:44 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-Q4E6S0 identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x72930972b17b sp=0x7ffcfe1fdeb8 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 3898\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-Q4E6S0 /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:18:57 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-DSK0QL identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x709f6eb2b17b sp=0x7ffc41867df8 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 4475\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-DSK0QL /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:23:30 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-LY7NPS identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x74b7a0b2b17b sp=0x7ffc041a4cd8 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 4673\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-LY7NPS /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:28:23 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-79AWO5 identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x76d7f312b17b sp=0x7ffedb55bfb8 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 4907\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-79AWO5 /home/cuckoo/.cuckoocwd/log/cuckoo.log:2025-08-26 20:29:20 ERROR [cuckoo.processing.worker]: Processing cancelled. error=Analysis 20250826-NXD3BS identification processing cancelled by plugin: Identify. Reason: Failed to unpack file: Zipjail error: b'Blocked system call occurred during sandboxing!\nip=0x70376e92b17b sp=0x7ffebcd3d138 abi=0 nr=99 syscall=sysinfo\n\x1b[1;34mKilling child 5050\x1b[0m\n'. Unpacker: 7zfile analysis_id=20250826-NXD3BS

installed via quickstart script and configured the webservice to get it running.
It works without a problem if i submit .exe samples.

** My Cuckoo version and operating system are::**
Cuckoo3 0.11.1, Ubuntu 24.04 LTS

Metadata

Metadata

Labels

bugSomething isn't working

Type

Fields

No fields configured for Bug.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions