{"report_id":"b3d3bce6-afc4-4b00-8569-3e80b004c419","version":6,"status":"done","tags":[],"date":"2024-04-03T01:04:28Z","url":{"schema":"http","addr":"is.muni.cz/el/law/podzim2020/MP113Zk/106209848/PrF_-_prirozene_a_pozitivni.exe?kod=MV940K;predmet=1319420;lang=en","fqdn":"is.muni.cz","domain":"is.muni.cz","tld":"cz"},"ip":{"addr":"147.251.49.10","port":0,"asn":2852,"as":"CESNET z.s.p.o.","country":"Czechia","country_code":"CZ"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T20:46:03Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"is.muni.cz","ip":{"addr":"147.251.49.10","port":443,"asn":2852,"as":"CESNET z.s.p.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"1995-08-25","domain_rank":891249,"first_seen":"2017-01-31 12:17:50","last_seen":"2024-03-28 04:08:04","alert_count":1,"request_count":1,"received_data":9359470,"sent_data":567,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"8f3b98249833df2e0e2cfe88b6a7133a","sha1":"2cca439063e257bb63400053cd9e7cb21f8bd318","sha256":"9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","sha512":"0098943daf9ee1f1705ab1e5b388895dba5280a00dc0c95579cb6ccd0c92897cdbe3ac405dd7ba7be64089bf01116d9994d8208dbbacb5a1233e66b03b822df8","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections","size":9359084,"url":{"schema":"https","addr":"is.muni.cz/el/law/podzim2020/MP113Zk/106209848/PrF_-_prirozene_a_pozitivni.exe?kod=MV940K;predmet=1319420;lang=en","fqdn":"is.muni.cz","domain":"is.muni.cz","tld":"cz"},"ip":{"addr":"147.251.49.10","port":443,"asn":2852,"as":"CESNET z.s.p.o.","country":"Czechia","country_code":"CZ"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2023-12-16","alert":"Scan result 2/71","trigger":"9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","verdict":"suspicious","severity":"","comment":"suspicious - 2/71","link":"https://www.virustotal.com/gui/file/9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"is.muni.cz/el/law/podzim2020/MP113Zk/106209848/PrF_-_prirozene_a_pozitivni.exe?kod=MV940K;predmet=1319420;lang=en","fqdn":"is.muni.cz","domain":"is.muni.cz","tld":"cz"},"ip":{"addr":"147.251.49.10","port":443,"asn":2852,"as":"CESNET z.s.p.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-04-03T01:04:02.272Z","timestamp":1712106242272,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"is.muni.cz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Feb 2024 00:26:12 GMT","end":"Sat, 18 May 2024 00:26:11 GMT"},"fingerprint":{"sha1":"65:58:13:F6:B6:86:8E:E3:6D:77:33:54:38:2E:F7:B9:79:EB:2C:9D","sha256":"F3:A2:35:47:27:54:1C:AD:F5:41:FF:E1:81:13:40:A8:A1:F4:54:E8:7F:E0:39:82:C6:4E:7E:E4:D4:B6:29:8D"}}},"request":{"raw":"GET /el/law/podzim2020/MP113Zk/106209848/PrF_-_prirozene_a_pozitivni.exe?kod=MV940K;predmet=1319420;lang=en HTTP/1.1\r\nHost: is.muni.cz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 03 Apr 2024 01:04:02 GMT\r\nServer: Apache\r\nAccept-Ranges: bytes\r\nSet-Cookie: __Host-issession=w33RIGiS39-EAG2GyqOVOQ9V; path=/; expires=Thu, 03-Apr-2025 01:04:02 GMT; secure; HttpOnly\r\nContent-Length: 9359084\r\nLast-Modified: Wed, 14 Oct 2020 13:09:00 GMT\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/x-ms-dos-executable\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9359084,"size_decoded":9359084,"mime_type":"application/x-ms-dos-executable","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections","md5":"8f3b98249833df2e0e2cfe88b6a7133a","sha1":"2cca439063e257bb63400053cd9e7cb21f8bd318","sha256":"9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","sha512":"0098943daf9ee1f1705ab1e5b388895dba5280a00dc0c95579cb6ccd0c92897cdbe3ac405dd7ba7be64089bf01116d9994d8208dbbacb5a1233e66b03b822df8","ssdeep":"196608:0jOfIX8wNk13Jh8R5Ov+v6GOQHmRhiSnvx4g8fAubcKR:0gIX8Kg5h8Sv5GO6gYA5pA1","tlshash":"9996338bf3896523c062417a96f1c3fc936ffe24ab130b4ff9205e197155a896f65a03","first_seen":"2023-12-17T03:27:56Z","last_seen":"2024-11-01T20:55:10.630997Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1226,"timings":{"blocked":119,"dns":3,"connect":30,"send":0,"wait":326,"receive":659,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2023-12-16","alert":"Scan result 2/71","trigger":"9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","verdict":"suspicious","severity":"","comment":"suspicious - 2/71","link":"https://www.virustotal.com/gui/file/9bcf31b0601cb4ad02bd351a649250e54e5c4457e9d676fbe9bedfe2f6d0edb9","meta":null}],"urlquery":null}}]}