Greynoise Callback File Response Structure

Malware file associated with a callback IP.

Type: object Properties: 9

SecurityThreat IntelligenceCybersecurityIP ReputationVulnerability ManagementNetwork TelemetrySOC AutomationPublic APIs

CallbackFileResponse is a JSON Structure definition published by GreyNoise Intelligence, describing 9 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

sha256 md5 sha1 threat_name vt_detection_count vt_engine_count file_name size type

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://api-evangelist.github.io/greynoise/json-structure/greynoise-callback-file-response-structure.json",
  "name": "CallbackFileResponse",
  "type": "object",
  "description": "Malware file associated with a callback IP.",
  "properties": {
    "sha256": {
      "type": "string",
      "description": "SHA-256 hash of the file.",
      "example": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
    },
    "md5": {
      "type": "string",
      "description": "MD5 hash of the file.",
      "example": "795bc7ce13f60d61e9ac03611dd36d90"
    },
    "sha1": {
      "type": "string",
      "description": "SHA-1 hash of the file.",
      "example": "string"
    },
    "threat_name": {
      "type": "string",
      "description": "VirusTotal threat name, if available.",
      "example": "Trojan.GenericKD.46542"
    },
    "vt_detection_count": {
      "type": "int32",
      "description": "Number of VirusTotal engines that flagged the file as malicious.",
      "example": 42
    },
    "vt_engine_count": {
      "type": "int32",
      "description": "Total number of VirusTotal engines that scanned the file.",
      "example": 71
    },
    "file_name": {
      "type": "string",
      "description": "Original file name, if known.",
      "example": "payload.bin"
    },
    "size": {
      "type": "int64",
      "description": "File size in bytes.",
      "example": 24576
    },
    "type": {
      "type": "string",
      "description": "File MIME type.",
      "example": "application/x-executable"
    }
  }
}