{"report_id":"77428102-95a2-4ecd-9d81-26083e3f9f5f","version":6,"status":"done","tags":[],"date":"2025-05-20T13:15:10Z","url":{"schema":"http","addr":"edge08.111.ir.cdn.ir/Files/Software/AnyDesk_Resetterv1_Downloadly.ir.rar?nocache=1747415960","fqdn":"edge08.111.ir.cdn.ir","domain":"cdn.ir","tld":"ir"},"ip":{"addr":"193.151.159.51","port":0,"asn":60077,"as":"Asre Dadeha Asiatech","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T13:15:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"edge08.111.ir.cdn.ir","ip":{"addr":"193.151.159.51","port":443,"asn":60077,"as":"Asre Dadeha Asiatech","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2023-09-05T06:34:30Z","last_seen":"2025-05-16T18:31:14.668316Z","alert_count":1,"request_count":1,"received_data":131633,"sent_data":559,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"ffe8bce2a07e7b367fe81824825d2798","sha1":"8ddaef43594e2b7861ec1ce2d7929f6049420714","sha256":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","sha512":"f227dd3da778e05b9266db62c84470357d024c14b13db5cfd118e020620d2905f241cf1b3839abc7b449e52ba71ed15830132d16f5736f16fe5adebe5f2827e4","magic":"RAR archive data, v4, os: Win32, flags: RecoveryRecordPresent","size":131253,"url":{"schema":"https","addr":"edge08.111.ir.cdn.ir/Files/Software/AnyDesk_Resetterv1_Downloadly.ir.rar?nocache=1747415960","fqdn":"edge08.111.ir.cdn.ir","domain":"cdn.ir","tld":"ir"},"ip":{"addr":"193.151.159.51","port":443,"asn":60077,"as":"Asre Dadeha Asiatech","country":"Iran","country_code":"IR"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-17","alert":"Scan result 34/64","trigger":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","verdict":"malicious","severity":"","comment":"malicious - 34/64","link":"https://www.virustotal.com/gui/file/87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"ffe8bce2a07e7b367fe81824825d2798","sha1":"8ddaef43594e2b7861ec1ce2d7929f6049420714","sha256":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","sha512":"f227dd3da778e05b9266db62c84470357d024c14b13db5cfd118e020620d2905f241cf1b3839abc7b449e52ba71ed15830132d16f5736f16fe5adebe5f2827e4","magic":"RAR archive data, v4, os: Win32, flags: RecoveryRecordPresent","size":131253,"url":{"schema":"https","addr":"edge08.111.ir.cdn.ir/Files/Software/AnyDesk_Resetterv1_Downloadly.ir.rar?nocache=1747415960","fqdn":"edge08.111.ir.cdn.ir","domain":"cdn.ir","tld":"ir"},"ip":{"addr":"193.151.159.51","port":443,"asn":60077,"as":"Asre Dadeha Asiatech","country":"Iran","country_code":"IR"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-17","alert":"Scan result 34/64","trigger":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","verdict":"malicious","severity":"","comment":"malicious - 34/64","link":"https://www.virustotal.com/gui/file/87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"edge08.111.ir.cdn.ir/Files/Software/AnyDesk_Resetterv1_Downloadly.ir.rar?nocache=1747415960","fqdn":"edge08.111.ir.cdn.ir","domain":"cdn.ir","tld":"ir"},"ip":{"addr":"193.151.159.51","port":443,"asn":60077,"as":"Asre Dadeha Asiatech","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-05-20T13:14:38.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.111.ir.cdn.ir","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Mar 2025 02:08:11 GMT","end":"Wed, 25 Jun 2025 02:08:10 GMT"},"fingerprint":{"sha1":"97:A0:0E:7A:A8:06:DB:6C:E9:8B:CE:44:15:EA:B0:2C:56:7E:1E:89","sha256":"F0:EE:42:F4:95:AF:84:6B:60:B3:9F:69:44:62:70:76:FF:9C:9D:C2:55:AB:1E:EF:74:E3:F4:8D:3E:15:F4:E9"}}},"request":{"raw":"GET /Files/Software/AnyDesk_Resetterv1_Downloadly.ir.rar?nocache=1747415960 HTTP/1.1\r\nHost: edge08.111.ir.cdn.ir\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2334,"data":"{\"evtAction\":\"pageLoad\",\"evtCode\":\"Page_Load\",\"ssafcDebugFlag\":false,\"akamaiData\":{\"browserHeight\":1024,\"browserWidth\":1280,\"screenWidth\":1280,\"screenHeight\":1024},\"evtDetails\":{\"eventAction\":\"pageLoad\",\"eventCode\":\"Page_Load\",\"datatransform\":false,\"page.category.applicationName\":\"CMS\",\"page.category.pageFunction\":\"Sales\",\"page.category.siteSection\":\"myatt Sales\",\"page.location.url\":\"/security/security-apps/\",\"page.pageInfo.friendlyPageName\":\"UF Security Security-apps Pg\",\"page.pageInfo.lineOfBusiness\":\"Wireless\",\"page.pageInfo.pageTitle\":\"AT\u0026T ActiveArmor \u0026 Mobile Security Apps | AT\u0026T\",\"page.pageInfo.flowCode\":\"DSUNK\",\"page.pageInfo.maxPageDepthViewed\":\"1024||\",\"page.pageInfo.viewedUIExperience\":\"Desktop\",\"page.location._addressBarFullURL\":\"https://www.att.com/security/security-apps/?source=EEB732384983\u0026wtExtndSource=T101012025\u0026LNS=EM_MB_MG_VTSRBCRUOPI_0125\u0026LinkID=activeArmor\",\"user.appVisitorCookie\":\"\",\"user.tech.thinNativeFlag\":0,\"user.uuid\":\"682c8015-1014-a326-e69f-e69f20e9f683\",\"impressionDS\":\"initialized\",\"pageLoadNotificationIsDelayed\":true,\"_evtPageName\":\"pageName not available\"},\"allids\":{\"adobeMCMID\":\"82871752807198367879174595171145675424\",\"sdid\":\"7D16CBDBC966D9BC-0C4B5412AA9304CA\",\"uuid\":\"682c8015-1014-a326-e69f-e69f20e9f683\",\"attauid\":\"\",\"sid\":\"\",\"idse_stack\":\"ffdc\",\"idse_ssaf_stack\":\"\",\"azure_ssaf_stack\":\"\",\"appFullUrl\":\"https://www.att.com/security/security-apps/?source=EEB732384983\u0026wtExtndSource=T101012025\u0026LNS=EM_MB_MG_VTSRBCRUOPI_0125\u0026LinkID=activeArmor\",\"domain\":\"https://www.att.com\",\"VISITOR_STATE\":\"NEW_VISITOR\",\"analyticsDataId\":\"d851922f-821e-456d-9b99-ed031ddacc64\",\"sourceSystem\":\"SSAF\",\"containerVersion\":\"561\",\"ucVersion\":\"1.0.261 prod\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"ssaf_tealium\":\"\",\"_fbp\":\"\",\"_fbc\":\"\",\"quantumMetricSessionId\":\"\",\"cj\":\"\",\"accountInFocusNumber\":\"\",\"_gcl_aw\":\"\",\"_gcl_dc\":\"\",\"_ptid\":\"\",\"tempBomboraData\":\"\",\"attpc_opt\":\"\",\"doNotTrack\":\"1\",\"li_fat_id\":\"\",\"irclickid\":\"\",\"gclid\":\"\",\"fbclid\":\"\",\"msclkid\":\"\",\"twclid\":\"\",\"ScCid\":\"\",\"ttclid\":\"\",\"cjevent\":\"\",\"wbraid\":\"\",\"transaction_id\":\"\",\"irpid\":\"\",\"gbraid\":\"\",\"_ga\":\"\",\"externalReferrer\":\"\",\"_ttp\":\"\",\"nextVersion\":\"14.2.21\"},\"neustar\":{\"neustarFabrickId\":\"\",\"eKeyClient\":\"\",\"hhidClient\":\"\",\"e1Segment\":\"\",\"bSegment\":\"\"},\"time\":{\"event\":1747746842227}}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 20 May 2025 13:06:54 GMT\r\nContent-Type: application/x-rar-compressed\r\nContent-Length: 131253\r\nLast-Modified: Fri, 21 Apr 2023 15:18:42 GMT\r\nServer: AsiatechCloudCDN/3.1\r\nAccept-Ranges: bytes\r\nVia: http/1.1 mid03.cdn.ir (AsiatechCloudEdge/3.1), http/1.1 edge08.cdn.ir (AsiatechCloudEdge/3.1)\r\nEtag: \"6442a952-200b5\"\r\nAge: 465\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131253,"size_decoded":0,"mime_type":"application/x-rar-compressed","magic":"RAR archive data, v4, os: Win32, flags: RecoveryRecordPresent","md5":"ffe8bce2a07e7b367fe81824825d2798","sha1":"8ddaef43594e2b7861ec1ce2d7929f6049420714","sha256":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","sha512":"f227dd3da778e05b9266db62c84470357d024c14b13db5cfd118e020620d2905f241cf1b3839abc7b449e52ba71ed15830132d16f5736f16fe5adebe5f2827e4","ssdeep":"3072:K8MdEHqo0egfvv1NjNIp+AdN1EcRJNDq/jVUFqL0iyHd4P6x:KZeKo0egfX1NGZRn5+bC94yx","tlshash":"b6d312bf68609bdcf89c3a7566120e677b77030400b9d066343862a723f99db65f9f60","first_seen":"2023-10-03T09:10:28Z","last_seen":"2025-05-20T13:15:11.966847Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1325,"timings":{"blocked":459,"dns":124,"connect":100,"send":0,"wait":95,"receive":313,"ssl":230},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-05-17","alert":"Scan result 34/64","trigger":"87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","verdict":"malicious","severity":"","comment":"malicious - 34/64","link":"https://www.virustotal.com/gui/file/87bc0a3dee0c264222a4ffeedcf5f5d3c89747dc4299a73f722bcb7ed29512ef","meta":null}],"urlquery":null}}]}