get https://www.virustotal.com/api/v3/feeds/files//download
Each JSON object contained in the file feed packages include a URL to this API endpoint to download the corresponding file. The link only works during the feed's lifetime, which is 7 days. Check /feeds/files/{time} for more information.
Special privileges required
In addition to the file feed privilege, download file privilege is also required.