Virusshare#

README

VirusShare#

VirusShare is a repository of malware samples to provide security researchers, incident responders, forensic analysts, and the morbidly curious access to samples of live malicious code.

The analyzer enables local searching for md5 hashes in Virusshare.com hash list.

Requirements#

Download the VirusShare hashlists. For convenience the getHashes.sh script is provided
In the analyzer parameters configure the path of downloaded hashlists folder.

Virusshare#

Author: Nils Kuhnert, CERT-Bund
License: AGPL-V3
Version: 2.0
Supported observables types:
- hash
- file
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://virusshare.com/

Description#

Search for MD5 hashes in Virusshare.com hash list

Configuration#

path	Define the path to the stored data
Default value if not configured	N/A
Type of the configuration item	string
The configuration item can contain multiple values	False
Is required	False

Templates samples for TheHive#

VirusShare: long report

Last update: November 15, 2021 06:39:13