{"report_id":"efb67046-7313-4b96-8b65-c35a3f07d117","version":6,"status":"done","tags":[],"date":"2025-02-18T11:53:14Z","url":{"schema":"http","addr":"dl1a.gamedl.ru/download/5afbhiqcr4x6oj6140g0nig3mrkyrb8g/H1/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4/1753585/ply-avowedp24trn.rar","fqdn":"dl1a.gamedl.ru","domain":"gamedl.ru","tld":"ru"},"ip":{"addr":"212.42.38.245","port":0,"asn":50313,"as":"Teslatel LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-29T11:53:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"dl1a.gamedl.ru","ip":{"addr":"212.42.38.245","port":443,"asn":50313,"as":"Teslatel LLC","country":"Russia","country_code":"RU"},"domain_registered":"2007-05-07","domain_rank":0,"first_seen":"2018-07-07T19:40:20Z","last_seen":"2025-02-15T06:59:25.368142Z","alert_count":1,"request_count":1,"received_data":233117,"sent_data":619,"comment":"","tags":null,"fingerprints":null}],"files":[{"md5":"0b786edc075d305bb878ff9e55b208ff","sha1":"854fbbdb098afc6df6baf88b244d3b4acf28e4d6","sha256":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","sha512":"dee9e9e90364a6e8d1b1c59cff9e9e0a42eab8e0ba2d209090aca3d22ba5e59a4b481c86aae8ba53e2ac7f34071ebffa869223b31304422082f2c7eb04131a67","magic":"RAR archive data, v5","size":232885,"url":{"schema":"https","addr":"dl1a.gamedl.ru/download/5afbhiqcr4x6oj6140g0nig3mrkyrb8g/H1/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4/1753585/ply-avowedp24trn.rar","fqdn":"dl1a.gamedl.ru","domain":"gamedl.ru","tld":"ru"},"ip":{"addr":"212.42.38.245","port":443,"asn":50313,"as":"Teslatel LLC","country":"Russia","country_code":"RU"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-02-17","alert":"Scan result 30/64","trigger":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","verdict":"malicious","severity":"","comment":"malicious - 30/64","link":"https://www.virustotal.com/gui/file/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","meta":null}]}}],"artifacts":{"windows_shortcuts":null,"files":[{"md5":"0b786edc075d305bb878ff9e55b208ff","sha1":"854fbbdb098afc6df6baf88b244d3b4acf28e4d6","sha256":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","sha512":"dee9e9e90364a6e8d1b1c59cff9e9e0a42eab8e0ba2d209090aca3d22ba5e59a4b481c86aae8ba53e2ac7f34071ebffa869223b31304422082f2c7eb04131a67","magic":"RAR archive data, v5","size":232885,"url":{"schema":"https","addr":"dl1a.gamedl.ru/download/5afbhiqcr4x6oj6140g0nig3mrkyrb8g/H1/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4/1753585/ply-avowedp24trn.rar","fqdn":"dl1a.gamedl.ru","domain":"gamedl.ru","tld":"ru"},"ip":{"addr":"212.42.38.245","port":443,"asn":50313,"as":"Teslatel LLC","country":"Russia","country_code":"RU"},"archive":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-02-17","alert":"Scan result 30/64","trigger":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","verdict":"malicious","severity":"","comment":"malicious - 30/64","link":"https://www.virustotal.com/gui/file/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","meta":null}]}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dl1a.gamedl.ru/download/5afbhiqcr4x6oj6140g0nig3mrkyrb8g/H1/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4/1753585/ply-avowedp24trn.rar","fqdn":"dl1a.gamedl.ru","domain":"gamedl.ru","tld":"ru"},"ip":{"addr":"212.42.38.245","port":443,"asn":50313,"as":"Teslatel LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-18T11:52:44.349Z","timestamp":1739879564349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"video.playground.ru","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Dec 2024 04:37:03 GMT","end":"Fri, 14 Mar 2025 04:37:02 GMT"},"fingerprint":{"sha1":"43:F3:73:28:38:76:CA:3F:56:75:5F:BD:1B:1B:BC:00:30:31:DD:A9","sha256":"EF:5D:FF:B1:90:3B:9D:8E:34:D3:4E:17:B6:5C:DC:56:70:BB:45:1C:84:D7:99:F5:D8:8F:91:31:D5:83:CD:EE"}}},"request":{"raw":"GET /download/5afbhiqcr4x6oj6140g0nig3mrkyrb8g/H1/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4/1753585/ply-avowedp24trn.rar HTTP/1.1\r\nHost: dl1a.gamedl.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.10.3\r\nDate: Tue, 18 Feb 2025 11:52:43 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 232885\r\nConnection: keep-alive\r\nLast-Modified: Sun, 16 Feb 2025 19:03:23 GMT\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232885,"size_decoded":232885,"mime_type":"application/octet-stream","magic":"RAR archive data, v5","md5":"0b786edc075d305bb878ff9e55b208ff","sha1":"854fbbdb098afc6df6baf88b244d3b4acf28e4d6","sha256":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","sha512":"dee9e9e90364a6e8d1b1c59cff9e9e0a42eab8e0ba2d209090aca3d22ba5e59a4b481c86aae8ba53e2ac7f34071ebffa869223b31304422082f2c7eb04131a67","ssdeep":"6144:Cnl2kpZ80jCqn7kFawbu3yFhTQHMHcJu1rzLD:+pZbn7kswTQHkaQ","tlshash":"0f34239b10bbfc25b388911e115ee75cd582ffe74b23a8f39551d8aa11d81c94a3a03f","first_seen":"2025-02-18T11:53:15.93271Z","last_seen":"2025-02-21T19:06:05.714489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2242,"timings":{"blocked":223,"dns":0,"connect":44,"send":0,"wait":299,"receive":1496,"ssl":177},"alerts":{"ids":null,"analyzer":[{"sensor_name":"virustotal","sensor_type":"file","title":"","description":"VirusTotal","scan_date":"2025-02-17","alert":"Scan result 30/64","trigger":"f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","verdict":"malicious","severity":"","comment":"malicious - 30/64","link":"https://www.virustotal.com/gui/file/f14c2f80c8065dd8de46c9fba06585a153339902165371b129a01e8b2b14c7c4","meta":null}],"urlquery":null}}]}