[Proposing Solution] Failure to extract zip file downloaded from ThreatGrid integration command

V.Kopparad — Fri, 17 Oct 2025 02:43:53 GMT

Cisco Secure Malware Analytics (Threat Grid) v2 is an OOTB integration comes as part of Cisco Secure Malware Analytics content pack to connect with ThreatGrid(TG) platform and achieve various functionalities.

Issue background: !threat-grid-sample-list integration command downloads resources for the given sample id from ThreatGrid depending on the type of artifacts provided as input.

supported artifacts from TG are: video.webm, network-artifacts.zip, report.html, sample.zip, screenshot.png, extracted-artifacts.zip, timeline.json, analysis.json, processes.json, network.pcap

sample.zip is one such artifact which downloads zip file from TG encrypted with default password - "infected".

Issue: Above command downloads the zip file in corrupt format which fails to extract file from the downloaded zip. This is due to a bug in the Cisco Secure Malware Analytics (Threat Grid) v2 integration

Solution: Proposing a solution (attached in screenshot below) which the XSOAR team may patch in their next release.

PAN closed support case Case# 03676558

@kmcdade @inagaria @alindsay

topic [Proposing Solution] Failure to extract zip file downloaded from ThreatGrid integration command in Cortex XSOAR Discussions

[Proposing Solution] Failure to extract zip file downloaded from ThreatGrid integration command