#virus-total #file #sample #analysis #antivirus #api #logic

bin+lib malwaredb-virustotal

Logic and datatypes for interacting with VirusTotal

5 releases

0.0.5 Apr 28, 2024
0.0.4 Mar 17, 2024
0.0.3 Dec 30, 2023
0.0.2 Dec 25, 2023
0.0.1 Dec 21, 2023

#379 in Cryptography

Download history 56/week @ 2024-02-01 41/week @ 2024-02-08 393/week @ 2024-02-15 210/week @ 2024-02-22 140/week @ 2024-02-29 161/week @ 2024-03-07 216/week @ 2024-03-14 206/week @ 2024-03-21 69/week @ 2024-03-28 135/week @ 2024-04-04 100/week @ 2024-04-11 227/week @ 2024-04-18 426/week @ 2024-04-25 249/week @ 2024-05-02 168/week @ 2024-05-09 182/week @ 2024-05-16

1,062 downloads per month
Used in 2 crates

Apache-2.0

48KB
895 lines

MalwareDB VirusTotal Client

TestLintOpenSSF Scorecard

This is logic for interacting with VirusTotal's V3 API. At present, only the following actions are supported:

  • Fetch file report: this gets the anti-virus scan data for a given sample, and there are examples in the testdata/ directory.
  • Request re-scan: ask VirusTotal to run a given sample through their collection of anti-virus applications and analysis tools.
  • Submit a sample: send a sample to VirusTotal for analysis.
  • Download a sample: download the original sample from VirusTotal (not fully tested, requires VirusTotal Premium).
  • The file report object and error types can be useful when interacting with VirusTotal using another crate or using VT's API directly; you don't have to use the client object in this crate to use the data (and error) types in this crate.

VirusTotal supports these actions given a MD5, SHA-1, or SHA-256 hash.

Additionally, this crate provides a client application for the supported operations above: submitting a file, retrieving a report, requesting re-analysis, and downloading a sample (requires Premium).

Dependencies

~9–21MB
~315K SLoC