Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I wish to analyze the changes made by a specific virus. For example, Win32.Sality.
Where can I get the sample of this, or other similar, malware for testing?

share|improve this question
2  
And do AV editors in general have some official feed for malware? –  curiousguy Aug 19 '12 at 18:22
2  
+1, always wondered this: where is malware when you need it?! –  Luc Aug 19 '12 at 19:00
    
I'm sure you can find some scene websites with virus samples, I can't remember the title exactly but there was one talk at Chaos Comm. Conference who was talking about that. Alternatively I can just give you my old hard drive ;) –  rath Jun 16 '13 at 12:17
    
@val you seem to be under the impression theres a complete collection of all viruses ever somewhere? AV vendors might have something like that but the storage requirements would be intense. Regardless your wont be getting a copy from anyone. Also. Ecair test file? –  NULLZ Jun 16 '13 at 22:43
    
Can you say me which tools you are using for the analyze? –  The All Seeing Eye Jun 17 '13 at 14:33

6 Answers 6

Here Are Some List of sites where you can get malware for samples

Contagio

KernelMode.info

DamageLab.org

MalwareBlacklist

Malware.lu

Malware URLs.

Open Malware.

virusshare

maleware.lu

An Blog which has some url's

Malshare

Tekdefence

MalwareTIps - Virus exchange Forum

The above url's are An Summary from here

Hope it helps

share|improve this answer
    
Can you supply the links with short summaries? I've looked at first ones and they all seem to be simple forums. I see now concrete links to infected files that I can download. Is it because I must register first to get access? –  Val Jun 16 '13 at 12:45
    
@Val Malshare doesnt require registration –  BlueBerry - vignesh4303 Jun 16 '13 at 12:49
    
Tekdefence is the only simply browsed. Openmalvare responds with some list if I enter "windows" into the search windows. I would not find these sites without your help. This trick, with entering "windows" into MD5 window, however, does not succeed with Malshare. It seems really demanding exact MD5 keys, which I do not have without having samples first. –  Val Jun 16 '13 at 13:10

virusshare.com is another great repository of malware samples, having a huge number of samples. A snapshot from the website's homepage:

enter image description here

Access is by invitation only, so you will need to drop a mail to the site admin.

Another good resource that I know of- www.deependresearch.org

share|improve this answer

http://www.malware.lu/ Has 2,236,674 samples

share|improve this answer

You can always run your own honeypot.

share|improve this answer

Offensive Computing has about 4,456,929 samples.

share|improve this answer

Contagiodump blog and the spam folder are your best friends

share|improve this answer
1  
Would be the first time ever that my spam folder contains malware. –  Luc Aug 19 '12 at 19:25
    
@Luc Let me guess, gmail? ;) –  Polynomial Aug 19 '12 at 19:59
    
@Polynomial Hotmail actually –  Luc Aug 19 '12 at 22:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.