sudo apt-get install build-essential python-dev gcc automake libtool python-pip subversion ant

cd yara-3.1.0
./bootstrap.sh
./configure
make
sudo make install

cd yara-python
python setup.py build
sudo python setup.py install

sudo apt-get install wine
winetricks nocrashdialog

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 7F0CEB10
echo 'deb http://downloads-distro.mongodb.org/repo/ubuntu-upstart dist 10gen' | sudo tee /etc/apt/sources.list.d/mongodb.list
sudo apt-get update
sudo apt-get install -y mongodb-org

sudo apt-get install libimage-exiftool-perl perl-doc 
sudo apt-get install clamav clamav-freshclam
sudo apt-get install unrar
sudo apt-get install python-m2crypto
sudo apt-get install python-pyasn1

sudo pip install requests
sudo pip install jsonpickle
sudo pip install simplejson
sudo pip install httplib2
sudo pip install yapsy
sudo pip install beautifulsoup
sudo pip install Jinja2
sudo pip install pymongo
sudo pip install hachoir-core
sudo pip install hachoir-parser
sudo pip install hachoir-regex
sudo pip install hachoir-subfile
sudo pip install bitstring
sudo pip install prettytable

sudo mkdir /opt/ragpicker
sudo chown -R [user:group] /opt/ragpicker/
TODO gitClone (svn checkout https://malware-crawler.googlecode.com/svn/ malware-crawler)
cd malware-crawler/MalwareCrawler/
ant install

usage: ragpicker.py [-h] [-a] [-t THREADS] [--log-level LOG_LEVEL]
                    [--log-filename LOG_FILENAME] [--version]

    Ragpicker Malware Crawler

    optional arguments:
  -h, --help            show this help message and exit
  -a, --artwork         Show artwork
  -p PROCESSES, --processes PROCESSES
                        Number of processes (default=3, max=6)
  -u URL, --url URL     Download and analysis from a single URL
  -d DIRECTORY, --directory DIRECTORY
                        Load files from local directory
  -i, --info            Print Ragpicker config infos
  -da, --delete         Delete all stored data
  --log-level LOG_LEVEL
                        logging level, default=logging.INFO
  --log-filename LOG_FILENAME
                        logging filename
  --version             show program's version number and exit

 |-- cleanmx                   Fetching Malware-URLs from Cleanmx RSS (http://support.clean-mx.de)
 |-- malShare                  Fetching Malware-URLs from MalShare daily list (http://www.malshare.com)
 |-- malc0de                   Fetching Malware-URLs from Malc0de RSS (http://malc0de.com)
 |-- malwarebl                 Fetching Malware-URLs from Malware Black List (http://www.malwareblacklist.com)
 |-- malwaredl                 Fetching Malware-URLs from Malware Domain List (http://www.malwaredomainlist.com)
 |-- secuboxlabs               Fetching Malware-URLs from SecuBox Labs (FRANCE) RSS (http://secuboxlabs.fr)
 |-- spyeyetracker             Fetching Malware-URLs from SpyEyetracker RSS (https://spyeyetracker.abuse.ch)
 |-- vxvault                   Fetching Malware-URLs from VXVault (http://vxvault.siri-urz.net)
 |-- zeustracker               Fetching Malware-URLs from Zeustracker RSS (https://zeustracker.abuse.ch)

 |-- all_cuckooSandbox         Adds the Sample to the list of cuckoo-sandbox tasks to be processed and analyzed
 |-- all_info                  Sample Base Infos (Don't disable "info"-Module!!!)
 |-- all_subFile               Find subfile in any binary stream
 |-- all_virustotal            Gets detection ratio from VirusTotal.com (via VT API)
 |-- all_virustotalNoApi       Gets detection ratio from VirusTotal.com (via Website)
 |-- antivirus_avg             Avg AntiVirus Scan (http://free.avg.com)
 |-- antivirus_avira           Avira AntiVirus Scan (http://www.avira.com/de/avira-free-antivirus)
 |-- antivirus_bitDefender     BitDefender AntiVirus Scan (http://www.bitdefender.co.uk/)
 |-- antivirus_clamav          ClamAv AntiVirus Scan (http://www.clamav.net/lang/en/)
 |-- antivirus_fprot           F-Prot AntiVirus Scan (http://www.f-prot.com/)
 |-- net_getOwnLocation        Returns the own internet location.
 |-- net_inetSourceAnalysis    Check IP and Host for reputation.
 |-- pdf_pdfid                 PDF - Analyze the suspicious PDF documents
 |-- pe_checkAntiDBG           PE - Check for suspicious anti debug API functions
 |-- pe_checkAntiVM            PE - Check for anti virtual machine tricks
 |-- pe_checkEP                PE - Alert if the EP section is not in a known good section or if its in the last PE section
 |-- pe_checkRSRC              PE - Analyse and list .rsrc section
 |-- pe_checkTLS               PE - List Thread Local Storage (TLS) Adresses
 |-- pe_checksum               PE - Check for Suspicious Checksum
 |-- pe_imports                PE - Analyse and list Import Address Table
 |-- pe_peid                   PE - Detects most common packers, cryptors and compilers for PE files
 |-- pe_sectionInfo            PE - Analyse and list the PE file sections
 |-- pe_suspiciousApiFunctions PE - Check for Suspicious API Functions
 |-- pe_timestamp              PE - TimeDateStamp is a 32 bit time at which this header was generated: is used in the process of "Binding"
 |-- pe_verifySigs             PE - Compute hashes, validate digital signature and list details

 |-- filedump                  Save sample file on the file system
 |-- hpfriends                 Publishes the results on an HPFeeds channel
 |-- jsondump                  Saves analysis results in JSON format
 |-- mongodb                   Reporting-Modul for MongoDB
 |-- reporthtml                HTML Reporting-Modul
 |-- vxcage                    VxCage is a Python application for managing a malware samples repository