{"report_id":"8f0f9816-c27f-405e-b0ea-a912fab25ba9","version":6,"status":"done","tags":[],"date":"2024-11-06T16:35:47Z","url":{"schema":"http","addr":"mods2.sharemods.com/cgi-bin/dl.cgi/62ykrsz3vupa6fduhzupa7fbbf3l3ryykww2uiwv3gorzbady7256vy/Rainbomizer_-_SA_Randomizer.7z","fqdn":"mods2.sharemods.com","domain":"sharemods.com","tld":"com"},"ip":{"addr":"49.12.84.254","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-01-15T16:35:47Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mods2.sharemods.com","ip":{"addr":"49.12.84.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2013-01-31","domain_rank":0,"first_seen":"2020-02-09T15:06:34Z","last_seen":"2024-11-02T18:52:05.633345Z","alert_count":1,"request_count":1,"received_data":226504,"sent_data":575,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"2fb2f36d8920819c7c41cf0f3b74a596","sha1":"10f2ebfb441c6c783bb768f0e25753534c4cdd3d","sha256":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","sha512":"bf5a4244464eff2190e0e4e4001b5a1d822fa54d2d4ffba989d4448841947aa26c79ec9c87eb044eb3739f637623df4e5d3827e0b6e9ccf3ede2d19248a264b7","magic":"7-zip archive data, version 0.4","size":226152,"url":{"schema":"https","addr":"mods2.sharemods.com/cgi-bin/dl.cgi/62ykrsz3vupa6fduhzupa7fbbf3l3ryykww2uiwv3gorzbady7256vy/Rainbomizer_-_SA_Randomizer.7z","fqdn":"mods2.sharemods.com","domain":"sharemods.com","tld":"com"},"ip":{"addr":"49.12.84.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"archive":[{"path":"Leiame (ou morra).txt","filename":"Leiame (ou morra).txt","modified":"","Modified":"2020-02-22T23:25:10Z","magic":"ISO-8859 text, with CRLF line terminators","size":1608,"md5":"786e38dacfd2b80d57b468d78205ac49","sha1":"ee154c359aa5cd3cbbd8ad518035bb7d65fa3531","sha256":"2c02acae18f2b875b5c17bf765425939a58ab2ca7bd701a52258b8f8d60acc5f","sha512":"dd96d84abba4ca8dd6ee3bb388b31286f156da2bc0583f49892d8c84a8a8e5e3fe7ae55c0d6316590711f8e5d05adb90f5fdc192cdac124ce9ac95f3bde4cda4","alerts":{"urlquery":null,"analyzer":null}},{"path":"rainbomizer/config.toml","filename":"config.toml","modified":"","Modified":"2020-02-14T21:53:20Z","magic":"ASCII text, with CRLF line terminators","size":12082,"md5":"717f78600fd9ac0705b356657c65ef6b","sha1":"790f70298f7132771081a8b2a93c818408cdd04d","sha256":"aa6ccc27b9e13319fbdc66fbac323d0d1fdb0cee64178129090df42beeee9c5f","sha512":"c14209a9e63459b4c3081139b2ee1f79e4b3b79c260ae26cf6ab6f4b08fb90d7b4c7f50bbadfa2cdd8717fe4dc1e16f04ab7b04ebaa6e728e07d7c99069dffb0","alerts":{"urlquery":null,"analyzer":null}},{"path":"rainbomizer/Cutscene_Models.txt","filename":"Cutscene_Models.txt","modified":"","Modified":"2020-02-14T21:53:20Z","magic":"ASCII text, with CRLF line terminators","size":11470,"md5":"823d7a171786c5ea810952b2ffaefce5","sha1":"37159364068e49e82bd5a32672b7aaaa909d95bd","sha256":"4a603889b204140acdba026db3b4f00aed3060aafdc8a2201411ab06fc2420d7","sha512":"14281097d3aa560252120cb61571f248737b19c5b1cd2600737bac8590545322d608de5b022a9b77dc5a11ce91cb06309b09fe484b466ae460483116498938de","alerts":{"urlquery":null,"analyzer":null}},{"path":"Readme (or die).txt","filename":"Readme (or die).txt","modified":"","Modified":"2020-02-22T23:25:54Z","magic":"ASCII text, with CRLF line terminators","size":1574,"md5":"11e156e72bf71c8f63541153fb4268fc","sha1":"14b5ba57acd9dd4bb35f76c31cd2145c412845ff","sha256":"8205e7253ee50ffbc102c5ec278a90ac82b48624a5d66488815034809229fcd4","sha512":"84706036b753f93122cb7a7e8daa04ff124dd1330c4b83c9f567545d9f758f70b7a32cdf28773bf21e9408e210b5cd931709e5b8316e34c4713669a121660ffa","alerts":{"urlquery":null,"analyzer":null}},{"path":"Readme (ORIGINAL).txt","filename":"Readme (ORIGINAL).txt","modified":"","Modified":"2020-02-18T02:48:10Z","magic":"Unicode text, UTF-8 (with BOM) text, with very long lines (487), with CRLF line terminators","size":6595,"md5":"d4e723ff5adcd19d36f9f8d7cd0b6d1c","sha1":"6cbcb147333344d6113d7c1f618a92c3c30e041d","sha256":"43a4eda641e43cd13d54f54a9413b36c012e5803880c435486272546ae8ec48e","sha512":"72d80c1178ec99f9411b6846e677e1017ec30349aa65906319cf2232c9d3b3353332c17d8670f8c764d03b548f58a3b8807dd932a083e09af8f408ad3a2cdf16","alerts":{"urlquery":null,"analyzer":null}},{"path":"SA.Rainbomizer.asi","filename":"SA.Rainbomizer.asi","modified":"","Modified":"2020-02-14T21:53:22Z","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":550912,"md5":"56d0afd62f691f3968b535fc685206eb","sha1":"c617ae670c22a7ae58237baa8a68f94eef82306b","sha256":"646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","sha512":"c953190f7a22cefbd56de87e8d1d3b5965f533532d5fc264d17ae20ef8ee084b30e0ae7c0b778f63dc8aebea72f8ec95256bd3264d3b5735b833f6b0c071b980","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2024-11-06","alert":"files - file ~tmp01925d3f.exe","trigger":"SA.Rainbomizer.asi","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-03-31","alert":"Scan result 22/71","trigger":"646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","verdict":"malicious","severity":"","comment":"malicious - 22/71","link":"https://www.virustotal.com/gui/file/646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2024-11-06","alert":"files - file ~tmp01925d3f.exe","trigger":"SA.Rainbomizer.asi","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2023-07-31","alert":"Scan result 9/59","trigger":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","verdict":"suspicious","severity":"","comment":"suspicious - 9/59","link":"https://www.virustotal.com/gui/file/2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"2fb2f36d8920819c7c41cf0f3b74a596","sha1":"10f2ebfb441c6c783bb768f0e25753534c4cdd3d","sha256":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","sha512":"bf5a4244464eff2190e0e4e4001b5a1d822fa54d2d4ffba989d4448841947aa26c79ec9c87eb044eb3739f637623df4e5d3827e0b6e9ccf3ede2d19248a264b7","magic":"7-zip archive data, version 0.4","size":226152,"url":{"schema":"https","addr":"mods2.sharemods.com/cgi-bin/dl.cgi/62ykrsz3vupa6fduhzupa7fbbf3l3ryykww2uiwv3gorzbady7256vy/Rainbomizer_-_SA_Randomizer.7z","fqdn":"mods2.sharemods.com","domain":"sharemods.com","tld":"com"},"ip":{"addr":"49.12.84.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"archive":[{"path":"Leiame (ou morra).txt","filename":"Leiame (ou morra).txt","modified":"","Modified":"2020-02-22T23:25:10Z","magic":"ISO-8859 text, with CRLF line terminators","size":1608,"md5":"786e38dacfd2b80d57b468d78205ac49","sha1":"ee154c359aa5cd3cbbd8ad518035bb7d65fa3531","sha256":"2c02acae18f2b875b5c17bf765425939a58ab2ca7bd701a52258b8f8d60acc5f","sha512":"dd96d84abba4ca8dd6ee3bb388b31286f156da2bc0583f49892d8c84a8a8e5e3fe7ae55c0d6316590711f8e5d05adb90f5fdc192cdac124ce9ac95f3bde4cda4","alerts":{"urlquery":null,"analyzer":null}},{"path":"rainbomizer/config.toml","filename":"config.toml","modified":"","Modified":"2020-02-14T21:53:20Z","magic":"ASCII text, with CRLF line terminators","size":12082,"md5":"717f78600fd9ac0705b356657c65ef6b","sha1":"790f70298f7132771081a8b2a93c818408cdd04d","sha256":"aa6ccc27b9e13319fbdc66fbac323d0d1fdb0cee64178129090df42beeee9c5f","sha512":"c14209a9e63459b4c3081139b2ee1f79e4b3b79c260ae26cf6ab6f4b08fb90d7b4c7f50bbadfa2cdd8717fe4dc1e16f04ab7b04ebaa6e728e07d7c99069dffb0","alerts":{"urlquery":null,"analyzer":null}},{"path":"rainbomizer/Cutscene_Models.txt","filename":"Cutscene_Models.txt","modified":"","Modified":"2020-02-14T21:53:20Z","magic":"ASCII text, with CRLF line terminators","size":11470,"md5":"823d7a171786c5ea810952b2ffaefce5","sha1":"37159364068e49e82bd5a32672b7aaaa909d95bd","sha256":"4a603889b204140acdba026db3b4f00aed3060aafdc8a2201411ab06fc2420d7","sha512":"14281097d3aa560252120cb61571f248737b19c5b1cd2600737bac8590545322d608de5b022a9b77dc5a11ce91cb06309b09fe484b466ae460483116498938de","alerts":{"urlquery":null,"analyzer":null}},{"path":"Readme (or die).txt","filename":"Readme (or die).txt","modified":"","Modified":"2020-02-22T23:25:54Z","magic":"ASCII text, with CRLF line terminators","size":1574,"md5":"11e156e72bf71c8f63541153fb4268fc","sha1":"14b5ba57acd9dd4bb35f76c31cd2145c412845ff","sha256":"8205e7253ee50ffbc102c5ec278a90ac82b48624a5d66488815034809229fcd4","sha512":"84706036b753f93122cb7a7e8daa04ff124dd1330c4b83c9f567545d9f758f70b7a32cdf28773bf21e9408e210b5cd931709e5b8316e34c4713669a121660ffa","alerts":{"urlquery":null,"analyzer":null}},{"path":"Readme (ORIGINAL).txt","filename":"Readme (ORIGINAL).txt","modified":"","Modified":"2020-02-18T02:48:10Z","magic":"Unicode text, UTF-8 (with BOM) text, with very long lines (487), with CRLF line terminators","size":6595,"md5":"d4e723ff5adcd19d36f9f8d7cd0b6d1c","sha1":"6cbcb147333344d6113d7c1f618a92c3c30e041d","sha256":"43a4eda641e43cd13d54f54a9413b36c012e5803880c435486272546ae8ec48e","sha512":"72d80c1178ec99f9411b6846e677e1017ec30349aa65906319cf2232c9d3b3353332c17d8670f8c764d03b548f58a3b8807dd932a083e09af8f408ad3a2cdf16","alerts":{"urlquery":null,"analyzer":null}},{"path":"SA.Rainbomizer.asi","filename":"SA.Rainbomizer.asi","modified":"","Modified":"2020-02-14T21:53:22Z","magic":"PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections","size":550912,"md5":"56d0afd62f691f3968b535fc685206eb","sha1":"c617ae670c22a7ae58237baa8a68f94eef82306b","sha256":"646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","sha512":"c953190f7a22cefbd56de87e8d1d3b5965f533532d5fc264d17ae20ef8ee084b30e0ae7c0b778f63dc8aebea72f8ec95256bd3264d3b5735b833f6b0c071b980","alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2024-11-06","alert":"files - file ~tmp01925d3f.exe","trigger":"SA.Rainbomizer.asi","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2024-03-31","alert":"Scan result 22/71","trigger":"646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","verdict":"malicious","severity":"","comment":"malicious - 22/71","link":"https://www.virustotal.com/gui/file/646c3d10c22d0379ebaa12d481c6e6b88751b75d48ed1aaccd6ff74eba6578f8","meta":null}]}}],"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2024-11-06","alert":"files - file ~tmp01925d3f.exe","trigger":"SA.Rainbomizer.asi","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"The DFIR Report","date":"2021-02-22","description":"files - file ~tmp01925d3f.exe","hash1":"10ff83629d727df428af1f57c524e1eaddeefd608c5a317a5bfc13e2df87fb63","reference":"https://thedfirreport.com","rule":"cobalt_strike_tmp01925d3f","score":"80","yarahub_license":"CC0 1.0","yarahub_reference_md5":"1c6ba04dc9808084846ac1005deb9c85","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58ae3b15-154e-47e9-a24c-c8b885a4cd55"}},{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2023-07-31","alert":"Scan result 9/59","trigger":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","verdict":"suspicious","severity":"","comment":"suspicious - 9/59","link":"https://www.virustotal.com/gui/file/2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"Mnemonic Secure DNS","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mods2.sharemods.com/cgi-bin/dl.cgi/62ykrsz3vupa6fduhzupa7fbbf3l3ryykww2uiwv3gorzbady7256vy/Rainbomizer_-_SA_Randomizer.7z","fqdn":"mods2.sharemods.com","domain":"sharemods.com","tld":"com"},"ip":{"addr":"49.12.84.254","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-11-06T16:35:22.477Z","timestamp":1730910922477,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sharemods.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 08 Oct 2024 00:00:00 GMT","end":"Sat, 11 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"91:5D:C8:4C:5B:E8:83:4C:6A:02:09:68:62:C0:99:89:6D:22:E8:A6","sha256":"4A:16:08:F3:9E:89:E4:23:9C:E3:E2:67:AB:1B:D5:3A:3A:67:43:6A:13:71:AF:76:3B:5F:20:85:A3:CB:76:60"}}},"request":{"raw":"GET /cgi-bin/dl.cgi/62ykrsz3vupa6fduhzupa7fbbf3l3ryykww2uiwv3gorzbady7256vy/Rainbomizer_-_SA_Randomizer.7z HTTP/1.1\r\nHost: mods2.sharemods.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Nov 2024 16:35:22 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/8.1.29\r\nAccess-Control-Allow-Origin: *\r\nContent-Disposition: attachment\r\nContent-Transfer-Encoding: binary\r\nContent-length: 226152\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/octet-stream\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":226152,"size_decoded":226152,"mime_type":"application/octet-stream","magic":"7-zip archive data, version 0.4","md5":"2fb2f36d8920819c7c41cf0f3b74a596","sha1":"10f2ebfb441c6c783bb768f0e25753534c4cdd3d","sha256":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","sha512":"bf5a4244464eff2190e0e4e4001b5a1d822fa54d2d4ffba989d4448841947aa26c79ec9c87eb044eb3739f637623df4e5d3827e0b6e9ccf3ede2d19248a264b7","ssdeep":"6144:dzrjZ40EmnDYoovw3qDODOyfJUHauDw6JQOoglASZK:dzrDEmnso76SDOyJMauZJQklAaK","tlshash":"7e242307f45be679a911890af091c18cd75e1df2f12722e70cfde018ba15978ae4a3e9","first_seen":"2023-11-15T13:44:22Z","last_seen":"2024-12-24T01:44:14.620236Z","times_seen":6,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":176,"dns":1,"connect":24,"send":0,"wait":48,"receive":110,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2023-07-31","alert":"Scan result 9/59","trigger":"2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","verdict":"suspicious","severity":"","comment":"suspicious - 9/59","link":"https://www.virustotal.com/gui/file/2c60b7676cb4b32cc2c25d7acfbc14a737ab0d47aed2f865f77aeeb68b0998e5","meta":null}],"urlquery":null}}]}