diff --git a/analyzers/VirusTotal/virustotal.py b/analyzers/VirusTotal/virustotal.py index 6f8824e52..20de07163 100755 --- a/analyzers/VirusTotal/virustotal.py +++ b/analyzers/VirusTotal/virustotal.py @@ -188,7 +188,15 @@ def summary(self, raw): raw["detected_downloaded_samples"] ) - if self.service in ["scan", "rescan"]: + if "Webutation domain info" in raw: + if raw['Webutation domain info']['Verdict'] == 'safe': + level = 'safe' + elif raw['Webutation domain info']['Verdict'] == 'unsure': + level = 'suspicious' + else: + level = 'malicious' + + if self.service == "scan": if "scans" in raw: result["scans"] = len(raw["scans"]) value = "{}/{}".format(result["positives"], result["total"])