10-16-2025 07:43 PM
Cisco Secure Malware Analytics (Threat Grid) v2 is an OOTB integration comes as part of Cisco Secure Malware Analytics content pack to connect with ThreatGrid(TG) platform and achieve various functionalities.
Issue background: !threat-grid-sample-list integration command downloads resources for the given sample id from ThreatGrid depending on the type of artifacts provided as input.
supported artifacts from TG are: video.webm, network-artifacts.zip, report.html, sample.zip, screenshot.png, extracted-artifacts.zip, timeline.json, analysis.json, processes.json, network.pcap
sample.zip is one such artifact which downloads zip file from TG encrypted with default password - "infected".
Issue: Above command downloads the zip file in corrupt format which fails to extract file from the downloaded zip. This is due to a bug in the Cisco Secure Malware Analytics (Threat Grid) v2 integration
Solution: Proposing a solution (attached in screenshot below) which the XSOAR team may patch in their next release.
PAN closed support case Case# 03676558
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
