[Cape sandbox] Analysis failing due to incompatable attributes

[human4357]

Description

When attempting to push analysis results to OpenCTI, the connector is met with a validation error.

Environment

OS (where OpenCTI server runs): Ubuntu 24.04 LTS
OpenCTI version: 6.2.5
OpenCTI client: Python (probably)
Other environment details: N/A

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Configure cape connector
2. Attempt to enrich an artifact

Expected Output

Analysis results are reported into OpenCTI

Actual Output

Validation error with message You cannot update incompatible attribute

Additional information

Connector log (screenshot also attached)
{"timestamp": "2024-07-16T10:37:24.935537Z", "level": "ERROR", "name": "CAPEv2 Sandbox", "message": "Error in message processing, reporting error to API", "exc_info": "Traceback (most recent call last):\n File \"/usr/local/lib/python3.11/site-packages/pycti/connector/opencti_connector_helper.py\", line 349, in _data_handler\n message = self.callback(event_data)\n ^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/opt/opencti-connector-cape-sandbox/cape-sandbox.py\", line 649, in _process_message\n return self._process_observable(observable)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/opt/opencti-connector-cape-sandbox/cape-sandbox.py\", line 631, in _process_observable\n return self._trigger_sandbox(observable)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/opt/opencti-connector-cape-sandbox/cape-sandbox.py\", line 623, in _trigger_sandbox\n return self._send_knowledge(observable, response_dict)\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/opt/opencti-connector-cape-sandbox/cape-sandbox.py\", line 105, in _send_knowledge\n final_observable = self.helper.api.stix_cyber_observable.update_field(\n ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n File \"/usr/local/lib/python3.11/site-packages/pycti/entities/opencti_stix_cyber_observable.py\", line 1250, in update_field\n result = self.opencti.query(\n ^^^^^^^^^^^^^^^^^^^\n File \"/usr/local/lib/python3.11/site-packages/pycti/api/opencti_api_client.py\", line 363, in query\n raise ValueError(value_error)\nValueError: {'name': 'VALIDATION_ERROR', 'error_message': 'Validation error', 'http_status': 500, 'genre': 'BUSINESS', 'field': 'hashes.MD5', 'message': 'You cannot update incompatible attribute'}"}

Screenshots (optional)