Web Links

A list of sites I frequently visit while researching malware and malicious activity.

Malware Analysis

• https://www.virustotal.com/en - Multi-antivirus engine
• http://totalhash.com - Malware analysis database
• http://www.threatexpert.com - Malware analysis reports
• http://virusshare.com - Malware samples
• http://jsunpack.jeek.org - Java script unpacker and analysis
• http://anubis.iseclab.org - Sandbox analysis
• https://malwr.com - Sandbox analysis
• http://camas.comodo.com/cgi-bin/submit - Sandbox analysis
• http://file-analyzer.net - Sandbox analysis (aka: Joe Sandbox)

Traffic Analysis

• http://malware-traffic-analysis.net - Excellent resource for malware traffic indicators and analysis
• http://www.malwaresigs.com - Another ggood resource for network based activity
• https://www.networktotal.com - Upload PCAP files to find malicious activity. Caveat: it's signature based
• http://www.netresec.com/?page=PcapFiles - PCAP files containing malicious activity
• http://data.deependresearch.org - A great spreadsheet containing many useful indicators
• https://www.wireshark.org/docs/dfref - All WireShark display filters

Malware Site Research

• http://malc0de.com/database - Malicious domain list
• http://www.google.com/transparencyreport/safebrowsing/malware/?hl=en - Malware distribution by ASN
• https://www.malwares.com - Malcious domain research
• http://www.malwaredomainlist.com/mdl.php - Malware domain list
• http://www.ipvoid.com - IP address research
• http://www.urlvoid.com - URL research
• http://urlquery.net/index.php - Website analysis

Miscellaneous sites

• http://www.cvedetails.com - Vulnerability details
• http://regexpal.com - Test your regex
• http://gallery.technet.microsoft.com/ScriptCenter - User created scripts (PowerShell, VB, SQL, Java)
• http://www.w3schools.com/tags/ref_urlencode.asp - URL encoding reference