{"report_id":"3229e145-4670-4859-9b11-289a1405b94e","version":6,"status":"done","tags":[],"date":"2024-04-16T10:00:11Z","url":{"schema":"http","addr":"mediaget.com/installer/mediaget_installer_472.exe?filename=MediaGet_id1432797ids1s.exe","fqdn":"mediaget.com","domain":"mediaget.com","tld":"com"},"ip":{"addr":"51.158.227.48","port":0,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:03:20Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mediaget.com","ip":{"addr":"51.158.129.110","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"domain_registered":"2009-12-22","domain_rank":165963,"first_seen":"2012-05-21 18:47:13","last_seen":"2024-04-15 06:33:57","alert_count":1,"request_count":1,"received_data":3731184,"sent_data":540,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"9066dff68c1d66a6d5f9f2904359876c","sha1":"e8654b3e5537fafef55dd3bd2e12ebd9d7dd5c43","sha256":"f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","sha512":"ac884a5ef1931d9d35b4b79330dc6326a662c953b06ca8413332a2a0dbe9c71eb62a866c317c7e97f7c4098625345a68ca3037d7e308d567346046f6466f8707","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections","size":3730576,"url":{"schema":"https","addr":"mediaget.com/installer/mediaget_installer_472.exe?filename=MediaGet_id1432797ids1s.exe","fqdn":"mediaget.com","domain":"mediaget.com","tld":"com"},"ip":{"addr":"51.158.129.110","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-04-10","alert":"Scan result 44/69","trigger":"f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","verdict":"malicious","severity":"","comment":"malicious - 44/69","link":"https://www.virustotal.com/gui/file/f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mediaget.com/installer/mediaget_installer_472.exe?filename=MediaGet_id1432797ids1s.exe","fqdn":"mediaget.com","domain":"mediaget.com","tld":"com"},"ip":{"addr":"51.158.129.110","port":443,"asn":12876,"as":"Scaleway S.a.s.","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-04-16T09:59:45.282Z","timestamp":1713261585282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mg-prod.mediaget.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Apr 2024 15:53:26 GMT","end":"Wed, 03 Jul 2024 15:53:25 GMT"},"fingerprint":{"sha1":"DF:6F:B5:32:7E:BE:EE:ED:2E:44:92:1D:3E:40:B1:39:DB:F4:B6:4A","sha256":"53:2C:15:DF:41:73:6D:DE:06:90:29:73:56:1A:EC:0C:95:DA:C5:9C:46:83:83:22:88:E6:01:F8:B5:7E:D3:21"}}},"request":{"raw":"GET /installer/mediaget_installer_472.exe?filename=MediaGet_id1432797ids1s.exe HTTP/1.1\r\nHost: mediaget.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000,h3-29=\":8443\"; ma=2592000\r\ncontent-disposition: attachment; filename=\"MediaGet_id1432797ids1s.exe\"\r\ncontent-type: application/x-msdownload\r\ndate: Tue, 16 Apr 2024 09:59:45 GMT\r\netag: \"9066dff68c1d66a6d5f9f2904359876c\"\r\nlast-modified: Wed, 13 Jul 2022 10:07:11 GMT\r\nserver: nginx/1.25.3\r\nset-cookie: cookie=9eaafc8c29695a67; Path=/; HttpOnly; Secure; SameSite=None\r\nx-amz-request-id: tx00000c0bb4a1c0d131646-0065730aca-1696c4b5-default\r\nx-amz-storage-class: STANDARD\r\nx-rgw-object-type: Normal\r\ncontent-length: 3730576\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3730576,"size_decoded":3730576,"mime_type":"application/x-msdownload","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections","md5":"9066dff68c1d66a6d5f9f2904359876c","sha1":"e8654b3e5537fafef55dd3bd2e12ebd9d7dd5c43","sha256":"f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","sha512":"ac884a5ef1931d9d35b4b79330dc6326a662c953b06ca8413332a2a0dbe9c71eb62a866c317c7e97f7c4098625345a68ca3037d7e308d567346046f6466f8707","ssdeep":"49152:feImsP9t1p54zznudobTg7tavKj8dpMwuNaE3hAsDnUaAehfV4I5loVuoTjmD01k:fP9tPK7bs7tKIweaEWKV4COTjs","tlshash":"ba06d042ebc681f1e847257550a7233f4e35a7100325d6d3dba12d66ed623d2aa3e3ce","first_seen":"2023-07-01T10:28:52Z","last_seen":"2025-05-13T07:26:07.289206Z","times_seen":24,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":164,"dns":1,"connect":19,"send":0,"wait":22,"receive":295,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-04-10","alert":"Scan result 44/69","trigger":"f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","verdict":"malicious","severity":"","comment":"malicious - 44/69","link":"https://www.virustotal.com/gui/file/f21b040f7c47d8d3d9c1f0ef00f09e69f2c3f0e19d91988efc0ddd4833ced121","meta":null}],"urlquery":null}}]}