Email Notifications

#############################

# Email Notification settings

#

# Note: use '--test-email' CLI to test the smtp settings

#############################

smtpServer=

smtpPort=465

smtpUser=

smtpPass=

smtpUseSSL=true

smtpUseStartTLS=false

smtpDebugEnabled=true

​

# Note: set this to true, if the email notification feature should be turned on

notifyEmailsEnabled=true

# Note: specify a list of emails separated by comma (e.g. "analyst1@domain.com,analyst2@domain.com")

notifyEmails=

notifyEmailsIgnoreDomains=

​

# Note: use 'ALL' to notify on any verdict

notifyEmailsOnVerdicts=LIKELY_MALICIOUS,MALICIOUS

# Note: if enabled, whenever a report is generated for a msg/eml/rfc822 file, the "to" address is notified in addition to 'notifyEmails'

notifyEmailSenderOfEmailFiles=false

notifyEmailReceiverOfEmailFiles=false

notifyEmailsDefaultSender=noreply@mydomain.com

# Note: if enabled, whenever a report is generated for a msg/eml/rfc822 file, the "from" header will be set to the original sender

notifyEmailsUseOriginalSender=false

# Note: the following placeholder may be used: $SHA-256

# e.g. notifyEmailsIncludeUrlInAlert=https://www.filescan.io/search-result?query=$SHA-256

notifyEmailsIncludeUrlInAlert=

From: <noreply@filescan.io>

Subject: [FSIO] Completed analysis for 'pafish.exe' (Task ID: 5f709158-c08f-4fb9-a43f-597873aedef2): { "verdict": "LIKELY_MALICIOUS", "threatLevel": 0.75, "confidence": 1 }

​

---------------------------- Analysis Overview ----------------------------

​

fsBroker version: 1.1.0-2f62d72

​

SHA-256: 9e7d694ed87ae95f9c25af5f3a5cea76188cd7c1c91ce49c92e25585f232d98e

​

Submit ID: d6809fa3-e226-4484-b07b-1f68ba259a46

​

Task ID: 5f709158-c08f-4fb9-a43f-597873aedef2

​

Date: 2023-10-291 07:52+0000291

​

submitName: pafish.exe

​

mediaType:

​

{

  "string": "application/x-msdownload; format\u003dpe32",

  "slash": 11,

  "semicolon": 24,

  "parameters": {

    "format": "pe32"

  }

}

​

---------------------------- Report Overview ----------------------------

​

overallState:

​

"SUCCESS"

​

finalVerdict:

​

{

  "verdict": "LIKELY_MALICIOUS",

  "threatLevel": 0.75,

  "confidence": 1

}

​

allTags:

​

[

  {

    "source": "YARA_RULE",

    "sourceIdentifier": "9e7d694ed87ae95f9c25af5f3a5cea76188cd7c1c91ce49c92e25585f232d98e",

    "isRootTag": false,

    "tag": {

      "name": "anti-vm",

      "synonyms": [],

      "descriptions": [],

      "verdict": {

        "verdict": "UNKNOWN",

        "threatLevel": 0,

        "confidence": 1

      }

    }

  },

  {

    "source": "OSINT_LOOKUP",

    "sourceIdentifier": "9e7d694ed87ae95f9c25af5f3a5cea76188cd7c1c91ce49c92e25585f232d98e",

    "tag": {

      "name": "hlux",

      "synonyms": [],

      "descriptions": [],

      "verdict": {

        "verdict": "LIKELY_MALICIOUS",

        "threatLevel": 0.75,

        "confidence": 1

      }

    }

  },

  {

    "source": "OSINT_LOOKUP",

    "sourceIdentifier": "9e7d694ed87ae95f9c25af5f3a5cea76188cd7c1c91ce49c92e25585f232d98e",

    "tag": {

      "name": "khalesi",

      "synonyms": [

        "KPOT Stealer",

        "kpot"

      ],

      "verdict": {

        "verdict": "LIKELY_MALICIOUS",

        "threatLevel": 0.75,

        "confidence": 1

      }

    }

  }

]