Malware Pack request

[MalwareT]

Hi, i'm starting to test security products next week and i need good quality malware pack with at least 1500 -2600 samples. I know this is too much, and i hope someone will answer on my request. Thanks anyways .

 

[Cowpipe]

Too much? Don't be silly, you're more than welcome to ask and I'll see what I can do for you as we all will

What kind of samples are you looking for?

 

[MalwareT]

Good samples with high risk. You can add any kind you want, but dont add ransomware because my test will be useless.

 

[Cowpipe]

I have a large collection of adware and PUPs and a separate collection of trojans (mostly droppers, PSWs etc) I can also provide you with an array of variously packed malware so you can test the classification ability, eg: whether the anti-virus simply detects all packed files as malicious or whether it only detects malicious packed files. It's up to you really, if you post up a wish list I'll dig around through my disks and see what I can get you

Who knows, I might even include you some of my own viruses and malware, written back in my blackhat days haha

 

[MalwareT]

Yes, you can add worms, adware,PUPs,trojans, and viruses.I dont know if you have rootkits, but you can add them. Extension can be any you want (except .vir).

 

[Malware1]

Does that matter? You can always change the extension.

 

[Cowpipe]

You could always make up a batch file to rename any vir files, untested but something like this perhaps?

ren *.vir *.exe

 

[Malware1]

You could always make up a batch file to rename any vir files, untested but something like this perhaps?

ren *.vir *.exe

Thief, you stole it from me... I posted it in a comment to YouTube test.

 

[Cowpipe]

Thief, you stole it from me... I posted it in a comment to YouTube test.

Hahaha... Oops (bows down before @Malware1, the batch file master and begs for forgiveness)

 

[MalwareT]

@Cowpipe Let me know when you are done, and post link in inbox or here. Thanks for help

 

[Cowpipe]

@Malware Test Sorry for the delay, been busy with getting my server set up and with activities here at MalwareTips.

Going to sort through my samples pack today pull you as many good quality samples as I can, a variety of different sample types (I'll folder organise them for you to make it easier). Unfortunately I don't stock clean files, so if you need any of those you'll have to go searching, unless somebody else here has some

 

[MalwareT]

@Malware Test Sorry for the delay, been busy with getting my server set up and with activities here at MalwareTips.

Going to sort through my samples pack today pull you as many good quality samples as I can, a variety of different sample types (I'll folder organise them for you to make it easier). Unfortunately I don't stock clean files, so if you need any of those you'll have to go searching, unless somebody else here has some

Well, no rush. You can put all samples in one folder then you can archive them. For clean files i can find some here. Thank you for pack.

 

[Arakasi]

Cowpipe, you're making me want to go dig out all my old CD's with skulls and the like on them. LOL
Some of the files i have will no longer run because of how old they are.

What kind of server are you setting up (set up) ? PM me if you need to, since its off topic, however i am digging up my stuff to see what i can find. Call it nostalgia.
Where is the nostalgic thread section ?

 

[Arakasi]

Look what i found hahah
https://www.mediafire.com/convkey/fdde/ztzz54xfjh1a44u6g.jpg
https://www.mediafire.com/convkey/3c9b/vj81on93u9t803f6g.jpg
God these are old.
Ok stepping out before i kill this thread with old memories.

 

[WinXPert]

I have a few nasties from circa 2010 (conficker, detnat, brontok, sality, etc). My newer high risk malware is a Virut-Ramnit. combo.

ren *.vir *.exe

This is how I do it in my WinXP

REGEDIT4
; Register Change exe to vir
[HKEY_CLASSES_ROOT\Directory\shell\Change exe to vir]
[HKEY_CLASSES_ROOT\Directory\shell\Change exe to vir\command]
@="cmd.exe /k ren *.exe *.vir && exit"

; Register Change vir  to exe
[HKEY_CLASSES_ROOT\Directory\shell\Change vir to exe]
[HKEY_CLASSES_ROOT\Directory\shell\Change vir to exe\command]
@="cmd.exe /k ren *.vir *.exe && exit"

 

[Arakasi]

I found about 9000 viruses in my old pack of samples. Some are outdated, but some are applications and even ESET started to flag a few.
Will spend the rest of the day sorting through them, and see which are good and which are unnecessary.
May be fun going through them even if they are older samples.

 

[Arakasi]

Since ESET has been around since 92 most of these are being detected, very very interesting.
Would like to see how the newer security products compare and hold up against it. Because they will not have databases as large , especially if they started up even after Vista was released. If they don't have very good heuristics some of these old virus's could cause some damage on systems with newer anti-virus engines.

https://www.mediafire.com/convkey/ad65/ceng672057eueeb6g.jpg

https://www.mediafire.com/convkey/027c/7ul8juxw8jaarbc6g.jpg

 

[WinXPert]

I have about 4000+ samples from a guy at Trend Micro. Knowing I have it is one thing, finding where it is in hundreds of my unlabeled CDs is another