Last Updated: 2020-04-25 15:30:28 UTC
by Didier Stevens (Version: 1)
When we publish diary entries covering malware, we almost always share the hash of the malware sample.
I prefer posting the MD5 hash because it is short, together with a link to the VirusTotal entry for said malware sample. VirusTotal reports different hashes, so that you can find your preferred hash. And if you have a VT subscription, you can also download the sample itself.
A new, free malware sharing service is available now: MALWARE Bazaar.
I will make sure that every public malware sample that I blog about from now on, will be available on MALWARE bazaar. Like this sample, for example, that I extracted from a malicious document I wrote recent diaries about.