I'm making an antivirus test just for my own, and I need thousands of malware samples (about 10k-30k, but the more the better). Please don't even mention Eicar test file because this will be a detection rate testing. I saw several AV testing sites, but I don't blindly trust them, so I just would like to get a clearer view of the quality of the products.
A quick Google search turned up this post which links to a number of malware sample databases:
Contagio Malware Dump: Free; password required
KernelMode.info: Free; registration required
Malware.lu’s AVCaesar: Free; registration required
MalwareBlacklist: Free; registration required
Malware DB: Free
Malwr: Free; registration required
Open Malware: Free
SecuBox Labs: Free
theZoo aka Malware DB: Free
However, the problem with most of these is that the samples tend to be quite dated, anywhere from a few weeks to years old. Thus while they're still useful for analysis purposes, they might not be as useful for testing the real-world effectiveness of antivirus programs. Detecting old malware is rather simple compared to keeping up to date with new malware, and most new samples that are widely distributed don't last more than a couple days before they are flagged by nearly all antivirus programs.
If you want to perform a more realistic test with new, just-discovered samples, you'll probably need a live feed rather than a database. PCMag uses a feed supplied by a company called MRG-Effitas in their AV software testing, for instance. Google also turned up the Cyveillance Malicious URL Data Feed. Unfortunately, it seems these feeds are provided as a commercial service and not generally offered to individuals, though it wouldn't hurt to try contacting these companies.
If all this sounds like too much trouble, you might want give the third-party test results another look. By referencing results from several labs you can usually get a reasonably good idea of the effectiveness of any AV program you are considering.
Found a website called VXHeaven where I can download a very huge number of viruses (260k). If the malware are working and not broken and not each of them are compressed, I will mark this as the answer for my question.
Btw. special thanks to
tlng05 for those sites, they could help other people, and they helped me in my research to find VXHeaven with the websites he sent.
There are quite a few accessible malware repositories out there.
Many of them are categorized here depending on your preferences, and it's the most up-to-date resource for now:
In addition since you are looking for about 10,000+ samples you can obtain a free daily batch at: https://www.virussamples.com
It seems many repositories are going away over time so finding the ones that are updated/maintained can be a little tricky but with some digging you'll be able to quickly access quite a few and build up a nice collection to work from.