6. Malware Sources

Once you have a lab set up, you will need malware samples for performing analysis. In this book, I have used various malware samples in the examples, since these samples are from real attacks, I have decided not to distribute them as there may be legal issues distributing such samples with the book. You can find them (or similar samples) by searching various malware repositories. The following are some of the sources from where you can get malware samples for your analysis. Some of these sources allow you to download malware samples for free (or after free registration), and some require you to contact the owner to set up an account, after which you will be able to obtain the samples:

• Hybrid Analysis: https://www.hybrid-analysis.com/
• KernelMode.info: http://www.kernelmode.info/forum/viewforum.php?f=16
• VirusBay: https://beta.virusbay.io/
• Contagio malware dump: http://contagiodump.blogspot.com/
• AVCaesar: https://avcaesar.malware.lu/
• Malwr: https://malwr.com/
• VirusShare: https://virusshare.com/
• theZoo: http://thezoo.morirt.com/

You can find links to various other malware sources in Lenny Zeltser's blog post https://zeltser.com/malware-sample-sources/.

If none of the aforementioned methods work for you and you wish to get the malware samples used in this book, please feel free to contact the author.