I wish to analyze the changes made by a specific virus. For example, Win32.Sality.
Where can I get the sample of this, or other similar, malware for testing?
-
2And do AV editors in general have some official feed for malware?– curiousguyCommented Aug 19, 2012 at 18:22
-
8+1, always wondered this: where is malware when you need it?!– LucCommented Aug 19, 2012 at 19:00
-
I'm sure you can find some scene websites with virus samples, I can't remember the title exactly but there was one talk at Chaos Comm. Conference who was talking about that. Alternatively I can just give you my old hard drive ;)– rathCommented Jun 16, 2013 at 12:17
-
@val you seem to be under the impression theres a complete collection of all viruses ever somewhere? AV vendors might have something like that but the storage requirements would be intense. Regardless your wont be getting a copy from anyone. Also. Ecair test file?– NULLZCommented Jun 16, 2013 at 22:43
-
Can you say me which tools you are using for the analyze?– HiddenCommented Jun 17, 2013 at 14:33
Comments disabled on deleted / locked posts / reviews
|
7 Answers
Contagiodump blog and the spam folder are your best friends
-
2Would be the first time ever that my spam folder contains malware.– LucCommented Aug 19, 2012 at 19:25
http://www.offensivecomputing.net has about 4,456,929 samples.
UPDATE
Offensive Computing is now offline
http://www.malware.lu/ Has 2,236,674 samples
virusshare.com is another great repository of malware samples, having a huge number of samples. A snapshot from the website's homepage:
Access is by invitation only, so you will need to drop a mail to the site admin.
Another good resource that I know of- www.deependresearch.org
Here Are Some List of sites where you can get malware for samples
KernelMode.info
DamageLab.org
MalwareBlacklist
Malware URLs.
Open Malware
An Blog which has some url's
MalwareTIps - Virus exchange Forum
The above url's are An Summary from here
answered Jun 16, 2013 at 12:35
-
Tekdefence is the only simply browsed. Openmalvare responds with some list if I enter "windows" into the search windows. I would not find these sites without your help. This trick, with entering "windows" into MD5 window, however, does not succeed with Malshare. It seems really demanding exact MD5 keys, which I do not have without having samples first.– ValCommented Jun 16, 2013 at 13:10
Github now contains massive repos of malware. The one I linked is but an example.
answered Jul 24, 2018 at 19:57
